All vulnerabilities
CVE-2000-0979

File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending

n/a n/a
Open in ThreatlineRecord JSON
CVSS
NoneNot scored
ExploitationPublic exploit codeAuxiliary module, 10 Oct 2000 and 2 more. Not in the KEV catalogMetasploit
Exploit odds (EPSS)75.1%Chance of exploitation activity in the next 30 days, higher than 99% of CVEs. Scored 23 Oct 2026FIRST EPSS
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
Published22 Jan 2001Updated 8 Aug 2024CVE List

What fixes it

No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.

Timeline

  1. 10 Oct 2000Exploit code publicMetasploit
  2. 22 Jan 2001, 05:00 UTCPublishedCVE List

Public exploit code and templates 3

  • Auxiliary moduleCVE-2000-0979 SMB Share Password Enumerator 10 Oct 2000Metasploit
  • Remote exploitMicrosoft Windows 9x/ME - Share Level Password Bypass (1) 10 Oct 2000Exploit-DB
  • Remote exploitMicrosoft Windows 9x/ME - Share Level Password Bypass (2) 10 Oct 2000Exploit-DB

Listed so defenders can prioritize. Threatline links to the source and does not host exploit code.

Description

File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level Password" vulnerability.

Text from CVE List

Affected versions 1

  • n/aaffected: n/aCVE List

References 3