CVE-1999-0387: High severity Microsoft Windows 95 vulnerability
A legacy credential caching mechanism used in Windows 95 and Windows 98 systems allows attackers to read plaintext network passwords.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable the legacy credential caching mechanism on Windows 95 and Windows 98 systems to prevent storage of plaintext network passwords.
Microsoft Windows 95/98 credential caching legacy credential caching = disabled - Compensating control
Isolate Windows 9x systems from untrusted networks or restrict their network access via firewall rules/ACLs to reduce the risk of attackers reading cached plaintext network passwords.
- Operational
Assume network passwords may have been exposed and change/rotate any network credentials used by Windows 95/98 systems after disabling the credential caching mechanism.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0387?
CVE-1999-0387 has a medium severity rating due to the potential exposure of plaintext network passwords.
How do I fix CVE-1999-0387?
To fix CVE-1999-0387, users should upgrade from Windows 95 or Windows 98 to a supported version of Windows.
Which software is affected by CVE-1999-0387?
CVE-1999-0387 affects Microsoft Windows 95 and Windows 98 with the Gold version.
What are the risks associated with CVE-1999-0387?
The risks associated with CVE-1999-0387 include unauthorized access to network resources due to plaintext password exposure.
Is CVE-1999-0387 still relevant today?
CVE-1999-0387 is considered less relevant today due to the outdated nature of the affected operating systems, but it highlights the importance of secure credential storage.