Auth bypass in Microsoft Windows Nt

CVE-1999-0366

In some cases, Service Pack 4 for Windows NT 4.0 can allow access to network shares using a blank password, through a problem with a null NT hash value.

Vulnerability class: Broken Authentication

EPSS: 0.037 (88.5th percentile) — read the EPSS interpretation.

Affected products

Microsoft Windows_nt — versions 4.0
N/a — versions n/a

Weakness classification (CWE)

CWE-287 — Improper Authentication

References

cve@mitre.org (vendor-advisory, x_refsource_MSKB)
cve@mitre.org (x_refsource_MS, vendor-advisory)