What’s Vulnerable › Vulnerabilities

CVE-1999-1086

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 1999-07-15 · updated 2026-06-16

Description

Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the MAC address in IPC fragmented packets that make NetWare Core Protocol (NCP) calls.

Affected products

• Novell Netware: through 5.0; 4.1, 4.11-sp5b

References

• http://marc.info/?l=bugtraq&m=93214475111651&w=2
• http://www.securityfocus.com/bid/528
• http://marc.info/?l=bugtraq&m=93214475111651&w=2
• http://www.securityfocus.com/bid/528

Get alerted when CVE-1999-1086 or the next vulnerability affects your stack