CVE-1999-1020
HighExploitation Probability (EPSS)
Very high risk93th percentile - higher than 93% of all known CVEs
Summary
The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, allowing remote attackers to access sensitive information such as users, groups, and readable objects via CX.EXE and NLIST.EXE.
Risk Assessment
The organization is at risk of exposing sensitive data, which could lead to privacy breaches and security issues for users.
Recommendation
It is recommended to update to the latest version of the software and restrict access to CX.EXE and NLIST.EXE to authorized users only.
Original NVD description (English source)
The installation of Novell Netware NDS 5.99 provides an unauthenticated client with Read access for the tree, which allows remote attackers to access sensitive information such as users, groups, and readable objects via CX.EXE and NLIST.EXE.