CVE-1999-0994: Medium severity Microsoft Windows NT vulnerability
Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable SYSKEY on affected Windows NT systems to prevent reuse of the keystream used to encrypt SAM password hashes.
Microsoft Windows NT (SAM/SYSKEY) SYSKEY = disabled - Operational
Rotate all account passwords stored in the SAM on affected Windows NT systems after addressing SYSKEY to ensure any potentially compromised password hashes are changed.
Event History
Frequently Asked Questions
What is the severity of CVE-1999-0994?
CVE-1999-0994 is considered to be of high severity due to the potential for password cracking.
How do I fix CVE-1999-0994?
To fix CVE-1999-0994, upgrade to a later version of Windows that does not utilize SYSKEY in this manner.
What versions of Windows NT are affected by CVE-1999-0994?
CVE-1999-0994 affects Windows NT 4.0 and its service packs.
What exploitation methods are possible with CVE-1999-0994?
An attacker can exploit CVE-1999-0994 by guessing or cracking weak passwords due to the reused keystream.
Is there a workaround for CVE-1999-0994 if upgrading is not possible?
A possible workaround for CVE-1999-0994 is to enforce strong password policies to mitigate the risk of password cracking.