CVE-1999-1086

CVE-1999-1086 describes a critical vulnerability in Novell NetWare 5 and earlier versions, specifically when operating over IPX with a packet signature level below 3. This flaw allows remote, unauthenticated attackers to achieve administrator privileges. The attack involves spoofing MAC addresses within fragmented IPC packets that initiate NetWare Core Protocol (NCP) calls. With a CVSS score of 10.0, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code in common databases like Metasploit or ExploitDB, nor significant community discussion or media coverage surrounding this decades-old vulnerability.