CVE-1999-1104

Published: Dec 31, 1999Modified: Apr 16, 2026

4.6

Vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 3.9 / Impact: 6.4

Source: NVD

Description

Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords.

Affected (1)

Products: Microsoft: Windows 95

Microsoft

1 product

Windows 95

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows 95	All versions

References (10)

http://marc.info/?l=bugtraq&m=87602167418931&w=2

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=88536273725787&w=2

Source: cve@mitre.org

http://marc.info/?l=ntbugtraq&m=88540877601866&w=2

Source: cve@mitre.org

http://support.microsoft.com/support/kb/articles/q140/5/57.asp

Source: cve@mitre.org

http://www.iss.net/security_center/static/71.php

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=87602167418931&w=2