Brief description: Windows NT user or administrator has password the same as login name
Full description: A Windows NT user or administrator has a password the same as the login name. This makes password guessing trivial.
Components: authentication system
Systems: Windows NT
Effect(s) of exploiting: The attacker gets the privileges of the user.
Detecting the hole:
Fixing the hole:
Other information:
password
PA Classification(s):
RISOS Classification(s):
DCS Classification(s):
CVE Number: CAN-1999-0535 -- A Windows NT account policy for passwords has inappropriate, security-critical settings, e.g. for password length, password age, or uniqueness.
Attack:
Advisories: CERT Windows NT Configuration Guidelines section V, Passwords; Microsoft's password filter passfilt.dll , available from the Platform SDK for Windows NT 4.0 SP 4.0 and later .
Related Vulnerabilities:
Reporting: in ( )