PT-1999-1073 · Microsoft · Windows

Published 1999-11-29 · Updated 2018-10-12 · CVE-1999-0387

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Windows versions prior to the removal of the legacy credential caching mechanism

Description A legacy credential caching mechanism in older Windows systems allows attackers to read plaintext network passwords.

Recommendations For Windows 95 and Windows 98 systems, consider upgrading to a newer version of Windows that does not include this legacy mechanism, as these systems are no longer supported.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-1999-0387

Affected Products

Windows

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-1999-0387 · Security Note
• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ168115 · Note
• http://securityfocus.com/bid/829 · Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-052 · Note