6.4
CVSSv2

CVE-2000-0979

Published: 19/12/2000 Updated: 12/10/2018
CVSS v2 Base Score: 6.4 | Impact Score: 4.9 | Exploitability Score: 10
VMScore: 650
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N

Vulnerability Summary

File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote malicious users to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level Password" vulnerability.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft windows 98se

microsoft windows me

microsoft windows 95

microsoft windows 98

Exploits

source: wwwsecurityfocuscom/bid/1780/info Share level password protection for the File and Print Sharing service in Windows 95/98/ME can be bypassed Share level access provides peer to peer networking capabilities in the Windows 9x/ME environment It depends on password protection in order to grant or deny access to resources Due to ...
source: wwwsecurityfocuscom/bid/1780/info Share level password protection for the File and Print Sharing service in Windows 95/98/ME can be bypassed Share level access provides peer to peer networking capabilities in the Windows 9x/ME environment It depends on password protection in order to grant or deny access to resources Due to a ...

Github Repositories

CVE-2000-0979

CVE-2000-0979 CVE-2000-0979rb is the standalone tool to exploit CVE-2000-0979 against Windows 95 SMB service msf_2000_0979rb is the Metasploit module You can copy this to ⁨metasploit-framework⁩ ▸ ⁨modules⁩ ▸ ⁨auxiliary⁩ ▸ scanner⁩ ▸ ⁨smb⁩ More documentation coming soon! Original advisory NSFOCUS Security Advisory(SA2000-05) Topic: Microsoft Wind