CVE-2000-0979: Medium severity Microsoft Windows 95 vulnerability

Published Dec 19, 2000

Updated

File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level Password" vulnerability.

Affected Software

4 affected components

Microsoft Windows 95

Microsoft Windows 98=gold

Microsoft Windows 98SE

Microsoft Windows Me

Remediation

Patch Available

http://www.securityfocus.com/bid/1780

Event History

Dec 19, 2000

CVE Published

05:00 AM

Jan 22, 2001

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2000-0979?

CVE-2000-0979 is rated as a medium severity vulnerability.

How do I fix CVE-2000-0979?

To fix CVE-2000-0979, consider disabling the File and Print Sharing feature or upgrade to a patched version of Windows.

What systems are affected by CVE-2000-0979?

CVE-2000-0979 affects Microsoft Windows 95, Windows 98, Windows 98SE, and Windows Me.

What exploits are associated with CVE-2000-0979?

CVE-2000-0979 can be exploited by remote attackers to bypass access controls on shared files.

Is CVE-2000-0979 still a risk today?

While CVE-2000-0979 primarily affects outdated and unsupported operating systems, it remains a risk if those systems are still in use.