PT-1999-1054 · Microsoft · Windows Nt 4.0

Published 1999-02-08 · Updated 2018-10-12 · CVE-1999-0366

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows NT 4.0 with Service Pack 4

Description The issue allows access to network shares using a blank password due to a problem with a null NT hash value.

Recommendations For Windows NT 4.0 with Service Pack 4, apply the necessary hotfix to resolve the issue with null NT hash values allowing access with blank passwords.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-1999-0366

Affected Products

Windows Nt 4.0

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-1999-0366 · Security Note
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ214840 · Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-004 · Note