Quick answers
- Is CVE-1999-0518 exploited in the wild?
- No. Junglewise Threat Intelligence has no report of CVE-1999-0518 being exploited in the wild.
- How severe is CVE-1999-0518?
- High severity, with a CVSS score of 7.5, published 1 January 1997.
- Which products and versions are affected?
- Multiple Windows (various) / Samba / NetBIOS-compatible OS.
- Is there a fix for CVE-1999-0518?
- No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
- How is CVE-1999-0518 attacked?
- It is attacked over the network, in an operating system.
- Am I affected by CVE-1999-0518?
- Check whether you run Microsoft Windows, Microsoft Windows 95 or Samba. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Technical details
This vulnerability involves the use of weak, default, or easily guessable passwords for NetBIOS/SMB shares. The root cause is typically a lack of password complexity requirements or the use of share-level security (common in older Windows versions) rather than user-level security. An unauthenticated attacker on the network can use brute-force or dictionary attacks to guess the password. Successful exploitation grants the attacker the same permissions as the share's intended users, potentially allowing for unauthorized reading, writing, or deletion of files. Mitigation involves enforcing strong password policies and migrating to more secure authentication protocols.
Affected products
- Multiple Windows (various) / Samba / NetBIOS-compatible OS
Timeline
- 1997-01-01: disclosed