PT-1999-1077 · Microsoft · Windows 98+1

Published 1999-01-05 · Updated 2022-08-17 · CVE-1999-0391

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows 95 and Windows 98

Description The issue concerns the cryptographic challenge of SMB authentication, which can be reused. This allows an attacker to replay the response and impersonate a user.

Recommendations For Windows 95 and Windows 98, at the moment, there is no information about a newer version that contains a fix for this issue.

Fix

Related Identifiers

CVE-1999-0391

Affected Products

Windows 95

Windows 98

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-0391 · Security Note
• https://marc.info/?l=bugtraq&m=91552769809542&w=2 · Note