CVE-1999-0391

Description

The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user.

Affected products

• microsoft / terminal_server
• microsoft / windows_2000
• microsoft / windows_nt3.5.1 – 3.5.1
• microsoft / windows_nt3.5.1 – 3.5.1
• microsoft / windows_nt3.5.1 – 3.5.1
• microsoft / windows_nt3.5.1 – 3.5.1
• microsoft / windows_nt3.5.1 – 3.5.1
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0
• microsoft / windows_nt4.0 – 4.0

References

• MAILING_LISThttps://marc.info/?l=bugtraq&m=91552769809542&w=2