CVE-1999-0391 — Microsoft Windows NT vulnerability

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
4.5%
top 10.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Windows NT
Timeline
PublishedJan 5
Latest updateApr 30

Description

The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDmicrosoft/windows_nt3.5.1, 4.0+1

🔴Vulnerability Details

2
GHSA
GHSA-9xx2-9vgq-cg78: The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and imperson↗2022-04-30
▶
CVEList
CVE-1999-0391: The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and imperson↗1999-09-29
▶