CVE-1999-1104: Weak Encryption
Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable password caching to prevent creation/use of the .pwl password list, which uses weak encryption and can be decrypted by local users.
Microsoft Windows 95 password caching (.pwl) = disabled
Event History
Frequently Asked Questions
What is the severity of CVE-1999-1104?
CVE-1999-1104 has a high severity due to the use of weak encryption for password storage in Windows 95.
How do I mitigate CVE-1999-1104?
To mitigate CVE-1999-1104, it is recommended to disable password caching and avoid the use of Windows 95.
What are the risks associated with CVE-1999-1104?
The risks associated with CVE-1999-1104 include unauthorized access to user accounts by local users through password decryption.
Which versions of Windows are affected by CVE-1999-1104?
CVE-1999-1104 specifically affects Microsoft Windows 95.
What should users do if they are still using Windows 95 and are concerned about CVE-1999-1104?
Users still on Windows 95 should consider upgrading to a more secure operating system as it is no longer supported and vulnerable to multiple security risks.