Windows 95, Windows 98 vulnerabilities
4 known CVE vulnerabilities in Windows 95, Windows 98, translated and rated.
- CVE-2000-0347Medium
Windows 95 and Windows 98 allow a remote attacker to cause a denial of service via a NetBIOS session request packet with a NULL source name.
- CVE-1999-0387High
A legacy credential caching mechanism in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.
- CVE-1999-1201Medium
Windows 95 and Windows 98 systems, when configured with multiple TCP/IP stacks bound to the same MAC address, allow remote attackers to cause a denial of service via a certain ICMP echo (ping) packet, which causes all stacks to send a ping response, aka TCP Chorusing.
- CVE-1999-0391High
The SMB authentication in Windows 95 and Windows 98 has a vulnerability that allows the cryptographic challenge response to be reused. An attacker can replay this response and impersonate a user.