Vulnerability Database

296,720

Total vulnerabilities in the database

CVE-2013-3707

The HTTPSTK service in the novell-nrm package before 2.0.2-297.305.302.3 in Novell Open Enterprise Server 2 (OES 2) Linux, and OES 11 Linux Gold and SP1, does not make the intended SSL_free and SSL_shutdown calls for the close of a TCP connection, which allows remote attackers to cause a denial of service (service crash) by establishing many TCP connections to port 8009.

  • Published: Dec 1, 2013
  • Updated: Apr 13, 2023
  • CVE: CVE-2013-3707
  • Severity: Low
  • Exploit:

CVSS v2:

  • Severity: Low
  • Score: 4.3
  • AV:N/AC:M/Au:N/C:N/I:N/A:P

CWEs:

Software From Fixed in
novell / open_enterprise_server 11.0-sp1 11.0-sp1.x
novell / open_enterprise_server 11.0 11.0.x