Vulnerability in Microsoft Terminal_server

CVE-1999-0391

The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user.

EPSS: 0.049 (91.2th percentile) — read the EPSS interpretation.

Affected products

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-1999-0391?
CVE-1999-0391 is a vulnerability in Microsoft Terminal_server. Published 1999-01-05.
Is CVE-1999-0391 known to be exploited?
1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.