HOME UtilitiesPatches and Updates Microsoft Windows ME Security Patch: 'Web Client NTLM Authentication' Vulnerability

Microsoft Windows ME Security Patch: 'Web Client NTLM Authentication' Vulnerability MS01-001

Description of Microsoft Windows ME Security Patch: 'Web Client NTLM Authentication' Vulnerability MS01-001:
The Web Extender Client (WEC) is a component that ships as part of Office 2000, Windows 2000, and Windows Me. WEC allows IE to view and publish files via web folders, similar to viewing and adding files in a directory through Windows Explorer. Due to an implementation flaw, WEC does not respect the IE Security settings regarding when NTLM authentication will be performed l instead, WEC will perform NTLM authentication with any server that requests it. If a user established a session with a malicious userls web site l either by browsing to the site or by opening an HTML mail that initiated a session with it l an application on the site could capture the userls NTLM credentials. The malicious user could then use an offline brute force attack to derive the password or, with specialized tools, could submit a variant of these credentials in an attempt to access protected resources. The vulnerability would only provide the malicious user with the cryptographically protected NTLM authentication credentials of another user. It would not, by itself, allow a malicious user to gain control of another userls computer or to gain access to resources to which that user was authorized access. In order to leverage the NTLM credentials (or a subsequently cracked password), the malicious user would have to be able to remotely logon to the target system. However, best practices dictate that remote logon services be blocked at border devices, and if these practices were followed, they would prevent an attacker from using the credentials to logon to the target system. This download is for Windows ME (without Office 2000 installed).

Supported OS: Windows XP, Windows NT, Windows Me, Windows 98, Windows 95, Windows 3.x, Windows 2003, Windows 2000

User reviews: Microsoft Windows ME Security Patch: 'Web Client NTLM Authentication' Vulnerability Download

Name: *
Email:
Review: *

 

Popular terms of download Microsoft Windows ME Security Patch: 'Web Client NTLM Authentication' Vulnerability:

Software downloads related to Microsoft Windows ME Security Patch: 'Web Client NTLM Authentication' Vulnerability

Microsoft Windows ME Security Patch: 'Share Level Password' Vulnerability
Microsoft Windows ME provides a password protection feature referred to as (share level access) for the File and Print Sharing service. However, due to the way the password feature is currently implemented, a file share could be compromised, by a... more info download

Microsoft Windows ME Security Patch: 'HyperTerminal Buffer Overflow' Vulnerability
The HyperTerminal application is a utility that installs, by default, on all versions of Windows 98, 98SE, Windows ME, Windows NT, and Windows 2000. The product contains an unchecked buffer in a section of the code that processes Telnet URLs. If a... more info download

Microsoft Windows ME Security Patch: 'Malformed IPX NMPI Packet' Vulnerability
The Microsoft IPX/SPX protocol implementation (NWLink) includes an NMPI (Name Management Protocol on IPX) listener that will reply to any requesting network address. The NMPI listener software does not filter the requesting computer's network... more info download

Microsoft Windows 95 Security Patch: 'Share Level Password' Vulnerability
Microsoft Windows 95 provides a password protection feature referred to as (share level access) for the File and Print Sharing service. However, due to the way the password feature is currently implemented, a file share could be compromised, by a... more info download

Microsoft Windows ME Security Patch: 'WebTV for Windows Denial of Service' Vulnerability
There is a denial of service vulnerability in WebTV for Windows that may allow a malicious user to remotely crash either the WebTV for Windows application and/or the computer system running WebTV for Windows. Restarting the application and/or... more info download

KingConvert Microsoft Windows Phone Video Converter
Microsoft Windows Phone Video Converter is software for 3GP/3GP2/AVI/MP4 file conversion of portable video device such as mobile phone, iPod, PSP, etc. more info download

Microsoft Windows 95 Security Patch: 'Malformed IPX NMPI Packet' Vulnerability
The Microsoft IPX/SPX protocol implementation (NWLink) includes an NMPI (Name Management Protocol on IPX) listener that will reply to any requesting network address. The NMPI listener software does not filter the requesting computer's network... more info download

Microsoft Windows NT 4.0 Security Patch and Windows 95/98/98SE/ME Workaround : 'Incomplete TCP/IP Packet' Vulnerability
There is a denial of service vulnerability that affects Windows NT 4.0 Windows 95, 98, 98 Second Edition and Windows Me. (Windows 2000 is not affected by this vulnerability.) By sending a flood of specially malformed TCP/IP packets to a victimls... more info download

Microsoft Windows 98/98SE Security Patch: 'HyperTerminal Buffer Overflow' Vulnerability
The HyperTerminal application is a utility that installs, by default, on all versions of Windows 98, 98SE, Windows ME, Windows NT, and Windows 2000. The product contains an unchecked buffer in a section of the code that processes Telnet URLs. If a... more info download

Microsoft Windows 98/98SE Security Patch: 'Share Level Password' Vulnerability
Microsoft Windows 98/98SE provides a password protection feature referred to as (share level access) for the File and Print Sharing service. However, due to the way the password feature is currently implemented, a file share could be compromised,... more info download

Microsoft Windows ME Security Patch: 'Share Level Password' Vulnerability
Microsoft Windows ME provides a password protection feature referred to as (share level access) for the File and Print Sharing service. However, due to the way the password feature is currently implemented, a file share could be compromised, by a... more info download

Microsoft Windows ME Security Patch: 'WebTV for Windows Denial of Service' Vulnerability
There is a denial of service vulnerability in WebTV for Windows that may allow a malicious user to remotely crash either the WebTV for Windows application and/or the computer system running WebTV for Windows. Restarting the application and/or... more info download

News related to Microsoft Windows ME Security Patch: 'Web Client NTLM Authentication' Vulnerability

July Security Patch Hits Nokia 6 In Hong Kong And Taiwan - Android Headlines
Android Headlines
Aside from the security patch, there are no new features or bug fixes that are included in the update, but the software is still a sizable download, with the file size measured at 149MB. During the update process, device...
T-Mobile July 2017 Security Patch Hits Samsung Galaxy S7 Series - Android Headlines
Android Headlines
After the Samsung Galaxy S8 series and the Galaxy Note 5, it's now time for the Galaxy S7 and Galaxy S7 Edge to receive the July 2017 security patch on T-Mobile's network. They may no longer be Samsung's...
Microsoft, Adobe Ship Critical Fixes - Krebs on Security
Krebs on Security
Microsoft today released security updates to fix almost a hundred security flaws in its various Windows operating systems and related software. ... Qualys says organizations using Microsoft Outlook should pay special...
Microsoft releases Windows XP security updates as it warns of 'destructive' state-sponsored cyber attacks - Daily Mail
Daily Mail
In a blog post, Microsoft President Brad Smith appeared to tacitly acknowledge what researchers had already widely concluded: The ransomware attack leveraged a hacking tool, built by the US National Security Agency, that leaked...
Windows 10 version 1511 update KB4034660 now available for download - Windows Report
Windows Report
Security updates to Windows kernel-mode drivers, Microsoft Graphics Component, Microsoft Windows Search Component, Microsoft Windows PDF Library, Microsoft Edge, Internet Explorer, Microsoft Scripting Engine, Windows...
How to Find, Download Microsoft Windows Store Apps - PCMag
PCMag
Microsoft's Windows Store launched with Windows 8 in 2012 offering only apps and games. Windows 10 in 2015 added music, movies, and TV shows, and April's Creators Update added books. But how can you shop at the Windows Store...
June 2017 Security Patch Hitting Galaxy Note 4 On AT&T - Android Headlines
Android Headlines
AT&T started rolling out the June Android Security Update to all Samsung Galaxy Note 4 units on its network, as revealed by the wireless carrier's official support pages for the device. The second largest mobile...
Microsoft Windows 10 Tip: Personalize your PC with new themes in the Windows Store - DABCC.com
DABCC.com
Did you know Windows desktop themes are now free to download in the Windows Store with the Windows 10 Creators Update? Choose from endless options to make your PC yours, including hundreds of wallpapers, sound options, and...
Ubuntu Linux Is Now Available for Download from the Microsoft Windows Store - LXer (press release)
LXer (press release)
Dubbed Ubuntu on Windows, this special Ubuntu build allows users to use various command-line utilities like GNU Bash, the Git distributed version control system, both APT and DPKG CLI package managers, and SSH (Secure...
Microsoft Windows 10 - PC Magazine
PC Magazine
You can get the software via download or on USB sticks for the same prices as previous Windows versions; that is, $119.99 list for Home and $199.99 for Pro. Your data and programs come ... Windows 10 presents almost no...