Upstream information

CVE-2013-3707 at MITRE

Description

The HTTPSTK service in the novell-nrm package before 2.0.2-297.305.302.3 in Novell Open Enterprise Server 2 (OES 2) Linux, and OES 11 Linux Gold and SP1, does not make the intended SSL_free and SSL_shutdown calls for the close of a TCP connection, which allows remote attackers to cause a denial of service (service crash) by establishing many TCP connections to port 8009.

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having moderate severity.

CVSS v2 Scores
  National Vulnerability Database
Base Score 4.3
Vector AV:N/AC:M/Au:N/C:N/I:N/A:P
Access Vector Network
Access Complexity Medium
Authentication None
Confidentiality Impact None
Integrity Impact None
Availability Impact Partial
SUSE Bugzilla entry: 804504 [CLOSED / FIXED]

SUSE Security Advisories:

  • TID7014063, published Mon May 21 00:49:27 CEST 2018

SUSE Timeline for this CVE

CVE page created: Sun Dec 1 20:19:14 2013
CVE page last modified: Fri Oct 7 12:46:32 2022