First published: Fri Dec 31 1999(Updated: )
Passfilt.dll in Windows NT SP2 allows users to create a password that contains the user's name, which could make it easier for an attacker to guess.
Credit: cve@mitre.org cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Windows NT | =4.0-sp2 | |
=4.0-sp2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-1999-1316 is considered a low severity vulnerability.
CVE-1999-1316 allows users to create passwords containing their own names, making it easier for attackers to guess passwords.
CVE-1999-1316 affects users of Microsoft Windows NT 4.0 SP2, specifically those utilizing the Passfilt.dll feature.
To mitigate CVE-1999-1316, users are advised to avoid using their names in passwords and update to a later version of Windows NT that addresses this issue.
There is no specific patch for CVE-1999-1316, but upgrading to a more secure version of Windows is recommended.