PT-1999-1576 · Microsoft · Windows 95

Published 1999-12-31 · Updated 2016-10-18 · CVE-1999-1104

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Windows 95 (affected versions not specified)

Description The issue concerns weak encryption used for the password list (.pwl) file in Windows 95 when password caching is enabled. This weakness allows local users to gain privileges by decrypting the passwords.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-1104

Affected Products

Windows 95

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-1999-1104 · Security Note
• http://marc.info/?l=bugtraq&m=87602167418931&w=2 · Note
• http://support.microsoft.com/support/kb/articles/q140/5/57.asp · Note
• http://marc.info/?l=bugtraq&m=88536273725787&w=2 · Note
• http://iss.net/security_center/static/71.php · Note
• http://marc.info/?l=ntbugtraq&m=88540877601866&w=2 · Note