Microsoft Windows 95 Remote Administration privileges management

Summaryinfo

A vulnerability, which was classified as critical, has been found in Microsoft Windows 95. Affected is an unknown function of the component Remote Administration/File Sharing for NetWare Networks. Performing a manipulation results in privileges management. This vulnerability is known as CVE-1999-1105. No exploit is available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in Microsoft Windows 95 (Operating System). It has been classified as critical. This affects an unknown functionality of the component Remote Administration/File Sharing for NetWare Networks. The manipulation with an unknown input leads to a privileges management vulnerability. CWE is classifying the issue as CWE-269. The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor. This is going to have an impact on confidentiality. The summary by CVE is:

Windows 95, when Remote Administration and File Sharing for NetWare Networks is enabled, creates a share (C$) when an administrator logs in remotely, which allows remote attackers to read arbitrary files by mapping the network drive.

The issue has been introduced in 08/24/1995. The weakness was published 12/31/1999 (Website). It is possible to read the advisory at zdnet.com. This vulnerability is uniquely identified as CVE-1999-1105. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. The technical details are unknown and an exploit is not publicly available. The attack technique deployed by this issue is T1068 according to MITRE ATT&CK.

The vulnerability was handled as a non-public zero-day exploit for at least 1590 days. During that time the estimated underground price was around $25k-$100k.

Upgrading to version 98 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at X-Force (7231). Further details are available at net-security.sk. Similar entries are available at VDB-15139 and VDB-15134. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Type

• Operating System

Vendor

• Microsoft

Name

• Windows

Version

• 95

License

• commercial

Support

• end of life (old version)

Website

• Vendor: https://www.microsoft.com/
• Product: https://www.microsoft.com/en-us/windows

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion