CVE-1999-1020

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 1998-09-18 · updated 2026-06-16

Description

The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which allows remote attackers to access sensitive information such as users, groups, and readable objects via CX.EXE and NLIST.EXE.

Affected products

Novell Netware: 4.1, 4.11-sp5b

References

http://marc.info/?l=bugtraq&m=90613355902262&w=2
http://www.securityfocus.com/bid/484
https://exchange.xforce.ibmcloud.com/vulnerabilities/1364
http://marc.info/?l=bugtraq&m=90613355902262&w=2
http://www.securityfocus.com/bid/484
https://exchange.xforce.ibmcloud.com/vulnerabilities/1364

Get alerted when CVE-1999-1020 or the next vulnerability affects your stack