Summary
generated automatically from NVD dataNovell Nsure Audit 1.0.1 contains a flaw in its webadmin.exe component, which handles SSL connections. A remote attacker can send corrupt client certificates containing malformed ASN.1 packets to trigger a denial of service, as shown with an exploit for the OpenSSL ASN.1 parsing vulnerability. The issue is rated MEDIUM with a CVSS v2.0 score of 5.0, and it affects availability only.
NVD description
webadmin.exe in Novell Nsure Audit 1.0.1 allows remote attackers to cause a denial of service via malformed ASN.1 packets in corrupt client certificates to an SSL server, as demonstrated using an exploit for the OpenSSL ASN.1 parsing vulnerability.
EPSS · FIRST.org
1.6%probability of exploitation in the next 30 days
Higher than 76% of scored CVEs
EPSS (Exploit Prediction Scoring System) estimates, from observed exploitation activity, how likely a CVE is to be exploited in the next 30 days. It complements CVSS, which measures severity, not likelihood. Score of 2026-11-02, recomputed daily by FIRST.org.
CVSS v2.0 Score
Information
- Published
- 15 janv. 2004
- Updated
- 16 juin 2026
- Status
- Modified
- Source
- cve@mitre.org
Affected products
Bounds published by NVD: "< 8.4.27" means 8.4.27 is no longer vulnerable. The fixed release to install is in the vendor advisory.
Weaknesses (CWE)
References (8)
- http://www.cirt.dk/advisories/cirt-31-advisory.pdfVendor Advisory
- http://www.cirt.dk/advisories/cirt-31-advisory.pdfVendor Advisory
Similar CVEs
Other vulnerabilities of type
Know which CVEs hit the versions you run.
Add the product and its version: cveo.tech lists the CVEs that affect it right away, then alerts you by email when a new one affects it — including before NVD has finished its analysis. Free, an account is all it takes.