CVE-1999-0518: High severity Microsoft Windows 95 vulnerability
A NETBIOS/SMB share password is guessable.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Remove
Remove
Microsoft Windows 9x SMB sharefrom your environment.Remove or disable the SMB/NetBIOS share if it is not required to eliminate the guessable password exposure.
- Configuration
Change the SMB/NetBIOS share password to a strong, non-guessable password (sufficient length and complexity; avoid dictionary words and reused passwords).
Microsoft Windows 9x NETBIOS/SMB share share_password = strong, non-guessable password - Compensating control
Restrict access to SMB/NetBIOS (TCP 139/445 and UDP 137/138) to trusted hosts or networks using firewall rules, ACLs, or network segmentation to reduce exposure until the password is remediated.
- Operational
Rotate any credentials that may have been exposed by the guessable share password and review audit/logs for signs of unauthorized access to the share.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0518?
CVE-1999-0518 is considered a low severity vulnerability due to the simplicity of guessing guessable passwords.
How do I fix CVE-1999-0518?
To fix CVE-1999-0518, you should implement strong password policies that prevent the use of easily guessable passwords.
What systems are affected by CVE-1999-0518?
CVE-1999-0518 primarily affects Microsoft Windows 95 operating systems with NETBIOS/SMB shares.
Can CVE-1999-0518 lead to unauthorized access?
Yes, CVE-1999-0518 can lead to unauthorized access if an attacker successfully guesses the NETBIOS/SMB share password.
Is there a workaround for CVE-1999-0518?
A workaround for CVE-1999-0518 is to disable the NETBIOS/SMB shares or restrict access to trusted users only.