PT-1999-1576 · Microsoft · Windows 95

Publicado 1999-12-31 · Atualizado 2016-10-18 · CVE-1999-1104

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows 95 (affected versions not specified)

Description The issue concerns weak encryption used for the password list (.pwl) file in Windows 95 when password caching is enabled. This weakness allows local users to gain privileges by decrypting the passwords.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-1999-1104

Produtos afetados

Windows 95

Referências · 6

• http://marc.info/?l=bugtraq&m=87602167418931&w=2 · Nota
• http://support.microsoft.com/support/kb/articles/q140/5/57.asp · Nota
• http://marc.info/?l=bugtraq&m=88536273725787&w=2 · Nota
• http://iss.net/security_center/static/71.php · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1104 · Nota de Segurança
• http://marc.info/?l=ntbugtraq&m=88540877601866&w=2 · Nota