CVE-1999-1086

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the MAC address in IPC fragmented packets that make NetWare Core Protocol (NCP) calls.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=93214475111651&w=2
http://www.securityfocus.com/bid/528Exploit, Patch, Vendor Advisory
http://marc.info/?l=bugtraq&m=93214475111651&w=2
http://www.securityfocus.com/bid/528Exploit, Patch, Vendor Advisory

Timeline

Published: Jul 15, 1999
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 1999

CVE-1999-10877.5Internet Explorer 4 treats a 32-bit number ("dotless IP address") in the a URL as the hostname instead of an IP address, which causes IE to CVE-1999-10915.0UNIX news readers tin and rtin create the /tmp/.tin_log file with insecure permissions and follow symlinks, which allows attackers to modify CVE-1999-10924.6tin 1.40 creates the .tin directory with insecure permissions, which allows local users to read passwords from the .inputhistory file.CVE-1999-10935.1Buffer overflow in the Window.External function in the JScript Scripting Engine in Internet Explorer 4.01 SP1 and earlier allows remote atta CVE-1999-10947.5Buffer overflow in Internet Explorer 4.01 and earlier allows remote attackers to execute arbitrary commands via a long URL with the "mk:" pr CVE-1999-10976.4Microsoft NetMeeting 2.1 allows one client to read the contents of another client's clipboard via a CTRL-C in the chat box when the box is e CVE-1999-11007.5Cisco PIX Private Link 4.1.6 and earlier does not properly process certain commands in the configuration file, which reduces the effective k CVE-1999-11014.6Kabsoftware Lydia utility uses weak encryption to store user passwords in the lydia.ini file, which allows local users to easily decrypt the CVE-1999-11022.1lpr on SunOS 4.1.1, BSD 4.3, A/UX 2.0.1, and other BSD-based operating systems allows local users to create or overwrite arbitrary files via CVE-1999-11044.6Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain pr CVE-1999-11055.0Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in CVE-1999-11095.0Sendmail before 8.10.0 allows remote attackers to cause a denial of service by sending a series of ETRN commands then disconnecting from the