CVE-2006-7155

Novell BorderManager 3.8 SP4 generates the same ISAKMP cookies for the same source IP and port number during the same day, which allows remote attackers to conduct denial of service and replay attacks. NOTE: this issue might be related to CVE-2006-5286.

• http://secunia.com/advisories/22699Patch, Vendor Advisory
• http://securitytracker.com/id?1017213
• http://www.attrition.org/pipermail/vim/2007-March/001410.html
• http://www.osvdb.org/30338Vendor Advisory
• http://www.securityfocus.com/bid/21014
• http://www.vupen.com/english/advisories/2006/4471
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30218
• https://secure-support.novell.com/KanisaPlatform/Publishing/201/3003139_f.SAL_Public.html
• http://secunia.com/advisories/22699Patch, Vendor Advisory
• http://securitytracker.com/id?1017213
• http://www.attrition.org/pipermail/vim/2007-March/001410.html
• http://www.osvdb.org/30338Vendor Advisory
• http://www.securityfocus.com/bid/21014
• http://www.vupen.com/english/advisories/2006/4471
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30218
• https://secure-support.novell.com/KanisaPlatform/Publishing/201/3003139_f.SAL_Public.html

Published

Mar 7, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-7149Multiple cross-site scripting (XSS) vulnerabilities in Mambo…
• CVE-2006-7150Multiple SQL injection vulnerabilities in Mambo 4.6.x allow …
• CVE-2006-7151Untrusted search path vulnerability in the libtool-ltdl libr…
• CVE-2006-7152default.asp in ASP-Nuke Community 1.5 and earlier allows rem…
• CVE-2006-7153PHP remote file inclusion vulnerability in index.php in Mini…
• CVE-2006-7154Iono allows remote attackers to obtain the full server path …
• CVE-2006-7156PHP remote file inclusion vulnerability in addon_keywords.ph…
• CVE-2006-7157Buffer overflow in Google Earth v4.0.2091 (beta) allows remo…
• CVE-2006-7158Cross-site scripting (XSS) vulnerability in Oracle Applicati…
• CVE-2006-7159Directory traversal vulnerability in include/prune_torrents.…
• CVE-2006-7160The Sandbox.sys driver in Outpost Firewall PRO 4.0, and poss…
• CVE-2006-7161SQL injection vulnerability in giris_yap.asp in Hazir Site 2…