CVE-1999-0994

Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

1999-12-16

Last modified

2024-08-01

Weaknesses

CWE-255

Affected products

• Windows Nt (Microsoft)

References

• http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ248183
• http://www.securityfocus.com/bid/873
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-056