PT-1999-1567 · Novell · Novell

Publicado 1999-07-15 · Atualizado 2016-10-18 · CVE-1999-1086

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell versions 5 and earlier

Description The issue allows remote attackers to gain administrator privileges by spoofing the MAC address in IPC fragmented packets that make NetWare Core Protocol (NCP) calls, specifically when running over IPX with a packet signature level less than 3.

Recommendations For Novell versions 5 and earlier, consider increasing the packet signature level to 3 or higher to mitigate the risk of exploitation. Additionally, restrict access to NCP calls to minimize the risk of unauthorized administrator privilege gains.

Exploit

Correção

Identificadores relacionados

CVE-1999-1086

Produtos afetados

Novell

Referências · 3

• 🔥 http://securityfocus.com/bid/528 · Exploit
• http://marc.info/?l=bugtraq&m=93214475111651&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1086 · Nota de Segurança