CVEvulnerability

CVE-1999-1086

10.0 HIGH Published 1999-07-15 Modified 2026-06-16 Official page ↗
Status
Modified
Published
1999-07-15
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the MAC address in IPC fragmented packets that make NetWare Core Protocol (NCP) calls.

Affected configurations

• novell netware (<= 5.0) • novell netware 4.1 • novell netware 4.11

References