CVE-1999-0391
HighExploitation Probability (EPSS)
Very high risk91th percentile - higher than 91% of all known CVEs
Summary
The SMB authentication in Windows 95 and Windows 98 has a vulnerability that allows the cryptographic challenge response to be reused. An attacker can replay this response and impersonate a user.
Risk Assessment
This vulnerability poses a risk of unauthorized access to systems, potentially leading to data theft or other malicious activities.
Recommendation
It is recommended to upgrade systems to newer versions that are not vulnerable to this flaw and to implement additional security measures to protect against replay attacks.
Other vulnerabilities in Windows 95, Windows 98
See all- CVE-2000-0347Medium
Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.
- CVE-1999-0387High
A legacy credential caching mechanism in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.
- CVE-1999-1201Medium
Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service via a certain ICMP echo (ping) packet, which causes all stacks to send a ping response, aka TCP Chorusing.
Original NVD description (English source)
The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user.