## Description

The cryptographic challenge of SMB authentication in Windows 95 and Windows 98 can be reused, allowing an attacker to replay the response and impersonate a user.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### microsoft - terminal_server

Affected Versions:

- *

### microsoft - windows_2000

Affected Versions:

- *

### microsoft - windows_nt

Affected Versions:

- 3.5.1

### microsoft - windows_nt

Affected Versions:

- 3.5.1

### microsoft - windows_nt

Affected Versions:

- 3.5.1

### microsoft - windows_nt

Affected Versions:

- 3.5.1

### microsoft - windows_nt

Affected Versions:

- 3.5.1

### microsoft - windows_nt

Affected Versions:

- 4.0

### microsoft - windows_nt

Affected Versions:

- 4.0

### microsoft - windows_nt

Affected Versions:

- 4.0

### microsoft - windows_nt

Affected Versions:

- 4.0

### microsoft - windows_nt

Affected Versions:

- 4.0

### microsoft - windows_nt

Affected Versions:

- 4.0

## References

- https://marc.info/?l=bugtraq&m=91552769809542&w=2
- https://marc.info/?l=bugtraq&m=91552769809542&w=2

Neural Processor Active