CVE-1999-1086: Critical severity Novell NetWare FTP Server vulnerability
Novell 5 and earlier, when running over IPX with a packet signature level less than 3, allows remote attackers to gain administrator privileges by spoofing the MAC address in IPC fragmented packets that make NetWare Core Protocol (NCP) calls.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Set the server's packet signature level to 3 or higher to prevent MAC-address spoofing in IPC fragmented packets that carry NCP calls.
Novell NetWare FTP Server packet signature level = 3 or higher - Configuration
Stop running the FTP server over IPX (disable IPX transport) so the vulnerable IPX code path is not used.
Novell NetWare FTP Server IPX transport = disabled - Compensating control
Block or restrict IPX traffic at network boundaries (firewalls/ACLs) and permit IPX only from trusted management networks to prevent remote attackers from reaching the vulnerable service.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1086?
CVE-1999-1086 is considered a critical vulnerability due to the potential for remote attackers to gain administrator privileges.
How do I fix CVE-1999-1086?
To fix CVE-1999-1086, ensure that packet signature level is set to 3 or higher on affected versions of Novell NetWare.
Which versions of Novell NetWare are affected by CVE-1999-1086?
CVE-1999-1086 affects Novell NetWare versions 4.1, 4.11 (SP5B), and all versions up to 5.0.
What type of attack does CVE-1999-1086 allow?
CVE-1999-1086 allows attackers to spoof MAC addresses to execute IPC fragmented packets making NCP calls.
Is there a workaround for CVE-1999-1086?
A possible workaround for CVE-1999-1086 is to disable IPX support if not required, reducing the attack surface.