What’s Vulnerable › Vulnerabilities
CVE-1999-0391
- Severity: high (CVSS 7.5 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 4.9% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 1999-09-29 · updated 2026-06-16
Description
The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user.
Affected products
- Microsoft Terminal Server: all versions
- Microsoft Windows 2000: all versions
- Microsoft Windows Nt: 3.5.1-sp1, 3.5.1-sp2, 3.5.1-sp3, 3.5.1-sp4, 3.5.1-sp5, 4.0 (+5)
References
Get alerted when CVE-1999-0391 or the next vulnerability affects your stack