CVE-2000-0979
Windows 95 98 ME - Unauthenticated Share Access Bypass via Single-Character Password Match
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2000-0979. PoCs published by Gabriel Maggiotti, stickler, Z6543.
AI-analyzed exploit summary This is a writeup describing a vulnerability in Windows 95/98/ME File and Print Sharing where share-level password protection can be bypassed by manipulating the password data length during authentication. The flaw lies in the NetBIOS password verification scheme, allowing an attacker to gain access by guessing only the first byte of the password.
Description
File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level Password" vulnerability.
Exploits (3)
This is a writeup describing a vulnerability in Windows 95/98/ME File and Print Sharing where share-level password protection can be bypassed by manipulating the password data length during authentication. The flaw lies in the NetBIOS password verification scheme, allowing an attacker to gain access by guessing only the first byte of the password.
The exploit describes a vulnerability in Windows 95/98/ME share-level password protection, where the password verification process only checks the first byte of the password if the data length is modified programmatically. This allows an attacker to bypass authentication by guessing the first byte of the password.
This repository contains a functional exploit for CVE-2000-0979, targeting a buffer overflow vulnerability in SMB protocol implementations. The exploit includes packet crafting and network communication to trigger the vulnerability, with references to historical exploits like WORM_OPASERV.