CVE-1999-0179: Medium severity Microsoft Windows 95 vulnerability
Windows NT crashes or locks up when a Samba client executes a "cd .." command on a file share.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove the affected component from your environment.
Remove or prevent Samba clients from accessing the Windows shares (uninstall the Samba client on client systems or remove those clients from allowed access lists) until a vendor fix is available.
- Configuration
Disable Windows file sharing on affected Windows 9x/NT systems if file shares are not required to prevent Samba clients from accessing shares.
Windows file sharing (SMB/CIFS) file_sharing_enabled = false - Compensating control
Restrict or block Samba client access to Windows file shares using network controls (firewall rules, ACLs, or VLAN segmentation) to prevent Samba clients from connecting to SMB/CIFS shares on the affected hosts.
- Operational
Advise users and administrators to avoid performing directory traversal commands such as "cd .." from Samba clients on Windows file shares until a fix is provided.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0179?
CVE-1999-0179 has a severity level that classifies it as a vulnerability that can lead to denial of service.
How do I fix CVE-1999-0179?
To fix CVE-1999-0179, you should apply patches or updates provided by Microsoft for affected versions of Windows NT and Windows 95.
What systems are affected by CVE-1999-0179?
CVE-1999-0179 affects Microsoft Windows NT 3.5.1 and Microsoft Windows 95.
What is the impact of exploiting CVE-1999-0179?
Exploiting CVE-1999-0179 can cause Windows NT systems to crash or lock up when a Samba client executes a 'cd ..' command.
Is CVE-1999-0179 still relevant today?
While CVE-1999-0179 is an older vulnerability, it remains relevant for legacy systems still in use.