CVE-1999-0387
HighExploitation Probability (EPSS)
Very high risk94th percentile - higher than 94% of all known CVEs
Summary
A legacy credential caching mechanism in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.
Risk Assessment
Attackers can gain access to sensitive information, potentially leading to unauthorized access to network resources.
Recommendation
It is recommended to avoid using outdated operating systems and to implement modern security mechanisms for credential storage.
Other vulnerabilities in Windows 95, Windows 98
See all- CVE-2000-0347Medium
Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.
- CVE-1999-1201Medium
Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service via a certain ICMP echo (ping) packet, which causes all stacks to send a ping response, aka TCP Chorusing.
- CVE-1999-0391High
The SMB authentication in Windows 95 and Windows 98 has a vulnerability that allows the cryptographic challenge response to be reused. An attacker can replay this response and impersonate a user.
Original NVD description (English source)
A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.