CVE-2000-0979

File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level Password" vulnerability.

Affected products

Windows 95, Windows 98, Windows Me

Microsoft Windows 95

All versions

Microsoft Windows 98

All versions

Microsoft Windows 98se

All versions

Microsoft Windows Me

All versions

CVSS 2.0

6.4 MEDIUM

EPSS

45.0% (99th percentile)

NVD status

Modified

Published

2001-01-22