CVE
CVE-2000-0979
- First Reported
- Oct 9, 2026
- Latest Reported
- Oct 9, 2026
CVE Enrichment
- CVSS
- 6.4 MEDIUM
- EPSS
- 75.05%
- EPSS Percentile
- 99.50%
- CISA KEV
- Not listed
Description
File and Print Sharing service in Windows 95, Windows 98, and Windows Me does not properly check the password for a file share, which allows remote attackers to bypass share access controls by sending a 1-byte password that matches the first character of the real password, aka the "Share Level Password" vulnerability.
Technical Details
- CVSS Version
- 2.0
- CNA / NVD Source
- cve@mitre.org
- Published
- 19-Dec-2000 12:00
- Last Modified
- 23-Sep-2026 17:10
- EPSS Date
- 2026-10-12
CVSS Vector
AV:N /
AC:L /
Au:N /
C:P /
I:P /
A:N
Affected Products / Versions
- microsoft / windows_95
Version / affected range: *
cpe:2.3:o:microsoft:windows_95:*:*:*:*:*:*:*:* - microsoft / windows_98
Version / affected range: *
cpe:2.3:o:microsoft:windows_98:*:gold:*:*:*:*:*:* - microsoft / windows_98se
Version / affected range: *
cpe:2.3:o:microsoft:windows_98se:*:*:*:*:*:*:*:* - microsoft / windows_me
Version / affected range: *
cpe:2.3:o:microsoft:windows_me:*:*:*:*:*:*:*:*
References
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
- af854a3a-2127-422b-91ae-364da2661108
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.
Reported Context (1)
- CVE-2000-0979 SMB Share Password Enumerator Metasploit Update Adds Exploit Modules, Windows AArch64 Payloads and Enhancements
CVE (8)
People (10)
Products (8)
Tools (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.