CVE-1999-1020 json
The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which allows remote attackers…
published 1998-09-18 28 y ago modified 2026-06-16 4 mo ago also EUVD-1999-1001
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 7.1%
- EPSS 7.1% chance of exploitation in 30 days, percentile 94%
- public exploits
- 1
- Exploit-DB
Summary
The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which allows remote attackers to access sensitive information such as users, groups, and readable objects via CX.EXE and NLIST.EXE.
Patch / fix
- securityfocus.com/bid/484 advisory
Timeline
- Published
- First public exploit (EDB-19365)
Exploit prediction
7.13% chance of exploitation in the next 30 days, higher than 94% of all scored CVEs (FIRST EPSS, 2026-11-08).
Exploits and checks
- EDB-19365 Novell Netware 4.1/4.11 - SP5B NDS Default Rights remote, 1999-04-09
- securityfocus.com http://www.securityfocus.com/bid/484 referenced PoC, tagged "exploit" by a source, unverified
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
securityfocus.com
/bid/484
vdb-entry, exploit, patch, vendor-advisory
-
exchange.xforce.ibmcloud.com
/vulnerabilities/1364
vdb-entry
-
marc.info
/?l=bugtraq&m=90613355902262&w=2
mailing-list
Sources
- CVE List CVE-1999-1020
- NVD CVE-1999-1020
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.