CVE-1999-0518

Technical details about CVE-1999-0518 are not publicly available in the provided documents. Monitor for updates from connected sources for affected products, versions, impact, and remediation information.

CVE-1999-0495

CVE-1999-0495 describes a remote path traversal vulnerability where an attacker can access a file system by using .. (dot dot) when interacting with SMB shares. The underlying cause is directory traversal over SMB, enabling disclosure or modification of sensitive data with complete impact on conf...

EUVD-1999-0517

A NETBIOS/SMB share password is the default, null, or missing...

Windows NetBIOS / SMB Remote Host Information Disclosure

The remote host is listening on UDP port 137 or TCP port 445, and replies to NetBIOS nbtscan or SMB requests. Note that this plugin gathers information to be used in other plugins, but does not itself generate a report. C Tenable Network Security, Inc. include"compat.inc"; if description...

EUVD-1999-0391

The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user...

CVE-1999-0391

CVE-1999-0391 involves the reuse of the SMB authentication cryptographic challenge in Windows 95/Windows 98, enabling an attacker to replay the response and impersonate a user. Affected software is Windows 95 and Windows 98; the vulnerability lies in the SMB authentication verification (cryptogra...

CVE-1999-0391

The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user...

95replay.txt

L0pht Security Advisory Advisory released Jan. 5, 1999 Application: Windows 95/98 Network File Sharing Severity: Sniffed authentications can be used to impersonate network users Author: [email protected] http://www.l0pht.com/advisories.html Overview : Windows 95/98 network file sharing reuses the...

smbval.library.bof.txt

Date: Sun, 6 Jun 1999 19:57:44 -0700 From: Patrick Michael Kane To: [email protected] Subject: Buffer overflows in smbval library While working on my Authen::Smb wrapper, which provides SMB authentication to UNIX hosts via perl, I discovered that the library that it is based on, smbvalid.a...

CVE-1999-1237

Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to execute arbitrary commands via 1 a long username, 2 a long password, and 3 other unspecified methods...

CVE-1999-0391

The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user...

CVE-1999-0495

A remote attacker can gain access to a file system using .. dot dot when accessing SMB shares...

CVE-1999-0520

A system-critical NETBIOS/SMB share has inappropriate access control...

CVE-1999-0225

Windows NT 4.0 allows remote attackers to cause a denial of service via a malformed SMB logon request in which the actual data size does not match the specified size...

Samba 1.9.19 - 'Password' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/1816/info Samba is an open source software suite that provides seamless file and print services to SMB/CIFS clients. Certain older versions of Samba had a remotely exploitable buffer overflow vulnerability. This vulnerability was in the password functi...

Microsoft Windows NT 4.0 SP5 Terminal Server 4.0 - Pass the Hash with Modified SMB Client

Microsoft Windows NT 4.0 SP5 Terminal Server 4.0 - Pass the Hash with Modified SMB Client source: https://www.securityfocus.com/bid/233/info A modified SMB client can mount shares on an SMB host by passing the username and corresponding LanMan hash of an account that is authorized to access the...

Microsoft Windows NT 4.0 SP5 / Terminal Server 4.0 - 'Pass the Hash' with Modified SMB Client

source: https://www.securityfocus.com/bid/233/info A modified SMB client can mount shares on an SMB host by passing the username and corresponding LanMan hash of an account that is authorized to access the host and share. The modified SMB client removes the need for the user to "decrypt" the...

CVE-1999-0519

A NETBIOS/SMB share password is the default, null, or missing...

CVE-1999-0518

A NETBIOS/SMB share password is guessable...

Microsoft Windows 95/Windows for Workgroups - 'smbclient' Directory Traversal

source: https://www.securityfocus.com/bid/1884/info Samba is a set of of programs that allow Windows® clients access to a Unix server's filespace and printers over NetBIOS. A directory traversal vulnerability exists in Microsoft's implementation of the SMB file and print sharing protocol for...