CVE-1999-1320: Medium severity Novell NetWare FTP Server vulnerability
Vulnerability in Novell NetWare 3.x and earlier allows local users to gain privileges via packet spoofing.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Novell NetWare FTP Serverfrom your environment.Uninstall Novell NetWare FTP Server from systems where it is not required.
- Configuration
Disable the FTP service on affected NetWare servers until a vendor-supplied patch or workaround is available.
Novell NetWare FTP Server FTP service (ftpd) enabled = false - Compensating control
Apply network segmentation and host-based firewall rules to isolate NetWare servers from untrusted/local user networks; restrict management/access to trusted administrator IPs to prevent packet spoofing by local users.
- Operational
Monitor and audit local user accounts and privilege changes for signs of exploitation; investigate and remediate any suspicious privilege escalations.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1320?
CVE-1999-1320 has a high severity level as it allows local users to gain elevated privileges.
How do I fix CVE-1999-1320?
To mitigate CVE-1999-1320, upgrade your Novell NetWare version to 4.0 or later.
Who is affected by CVE-1999-1320?
CVE-1999-1320 affects local users of Novell NetWare 3.x and earlier.
What types of attacks can exploit CVE-1999-1320?
CVE-1999-1320 can be exploited through packet spoofing techniques.
Is CVE-1999-1320 still relevant today?
While CVE-1999-1320 pertains to older versions of Novell NetWare, it remains relevant for systems still in use.