PT-1993-1007 · Novell · Novell Netware

Published 1993-09-16 · Updated 2017-10-10 · CVE-1999-1215

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Novell Netware versions 4.0 through 4.01

Description The issue allows local users to potentially gain privileges due to the temporary writing of user name and password information to disk by the LOGIN.EXE program.

Recommendations For Novell Netware versions 4.0 through 4.01, consider restricting access to sensitive areas of the system to minimize the risk of exploitation until a fix is available.

Fix

Related Identifiers

CVE-1999-1215

Affected Products

Novell Netware

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-1999-1215 · Security Note
• http://cert.org/advisories/CA-1993-12.html · Patch
• http://ciac.llnl.gov/ciac/bulletins/d-21.shtml · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/545 · Note