CVE-1999-0994

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Windows NT with SYSKEY reuses the keystream that is used for encrypting SAM password hashes, allowing an attacker to crack passwords.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-255

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Dec 16, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-09957.8Windows NT Local Security Authority (LSA) allows remote attackers to cause a denial of service via malformed arguments to the LsaLookupSids CVE-1999-09967.5Buffer overflow in Infoseek Ultraseek search engine allows remote attackers to execute commands via a long GET request.CVE-1999-09977.5wu-ftp with FTP conversion enabled allows an attacker to execute commands via a malformed file name that is interpreted as an argument to thCVE-1999-09985.0Cisco Cache Engine allows an attacker to replace content in the cache.CVE-1999-09994.3Microsoft SQL 7.0 server allows a remote attacker to cause a denial of service via a malformed TDS packet.CVE-1999-10005.0The web administration interface for Cisco Cache Engine allows remote attackers to view performance statistics.CVE-1999-10012.6Cisco Cache Engine allows a remote attacker to gain access via a null username and password.CVE-1999-10025.0Netscape Navigator uses weak encryption for storing a user's Netscape mail password.CVE-1999-10035.0War FTP Daemon 1.70 allows remote attackers to cause a denial of service by flooding it with connections.CVE-1999-10045.0Buffer overflow in the POP server POProxy for the Norton Anti-Virus protection NAV2000 program via a large USER command.CVE-1999-10055.0Groupwise web server GWWEB.EXE allows remote attackers to read arbitrary files with .htm extensions via a .. (dot dot) attack using the HELPCVE-1999-10065.0Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter.
CVE-1999-0994: Medium severity, CVSS 5.0 | Vulnix