PT-1999-1567 · Novell · Novell

Published 1999-07-15 · Updated 2016-10-18 · CVE-1999-1086

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Novell versions 5 and earlier

Description The issue allows remote attackers to gain administrator privileges by spoofing the MAC address in IPC fragmented packets that make NetWare Core Protocol (NCP) calls, specifically when running over IPX with a packet signature level less than 3.

Recommendations For Novell versions 5 and earlier, consider increasing the packet signature level to 3 or higher to mitigate the risk of exploitation. Additionally, restrict access to NCP calls to minimize the risk of unauthorized administrator privilege gains.

Exploit

Fix

Related Identifiers

CVE-1999-1086

Affected Products

Novell

References · 3

• 🔥 http://securityfocus.com/bid/528 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-1999-1086 · Security Note
• http://marc.info/?l=bugtraq&m=93214475111651&w=2 · Note