Search/CVE-1999-0391
● CVE

CVE-1999-0391

VendormicrosoftProductwindows 2000, windows nt, terminal serverDiscoveredJan 5, 1999UpdatedApr 16, 2026

The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user.

CVSS v3.1
—
EPSS
4.89%
probability of exploitation in 30 days
CISA KEV
Not listed
no confirmed exploitation reported
News coverage
0
sources referencing this CVE
Related IOCs
0
seen in the same coverage
Timeline
disclosure → media coverage
Jan 5, 1999
Disclosure — published as a CVE record. · last revised by NVD Apr 16, 2026