Malicious user with physical access to a computer can acquire cached domain password
This article was previously published under Q168115 This information does not apply to Microsoft Windows 98
Second Edition. SYMPTOMS If your computer runs Windows 95 or Windows 98 for use as a
network workstation, it may be possible for a malicious user to acquire your
network password. This attack would require that the malicious user have
physical access to your computer at some point after you log on to a server or
domain, but before the machine had been rebooted. While a program can be used
to read the cached password, doing so requires physical access to your computer
when it is not protected by a screen saver password and you must be running the
Microsoft Client for Microsoft Networks.
RESOLUTIONIf you are running Windows 98: The following file is available for download from the Microsoft Download Center:  Download 168115us8.exe now (http://download.microsoft.com/download/win98/update/168115/w98/en-us/168115us8.exe)119591 (http://support.microsoft.com/kb/119591/) How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.
If you are running Windows 95 or Windows 95 OEM Service Release versions 1, 2, 2.1, or 2.5: The following file is available for download from the Microsoft Download Center: Download 168115us5.exe now (http://download.microsoft.com/download/win95/update/168115/w95/en-us/168115us5.exe)119591 (http://support.microsoft.com/kb/119591/) How to obtain Microsoft support files from online services
Microsoft scanned this file for viruses. Microsoft used the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to the file.
STATUSMicrosoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section. MORE INFORMATION
For more information about issues resolved by updates to
thesecomponents, click the following article numbers to view the articles in the Microsoft Knowledge Base:
178824 (http://support.microsoft.com/kb/178824/)
Error message: Your password is too short
175051 (http://support.microsoft.com/kb/175051/) Windows 95 roaming profiles do not work
176543 (http://support.microsoft.com/kb/176543/) Windows 95 client is unable to receive roaming profiles
For more information about Windows 95 updates, click the following article number to view the article in the Microsoft Knowledge Base:
161020 (http://support.microsoft.com/kb/161020/)
Implementing Windows 95 updates
For related information on this problem, please
visit the following Microsoft Web site: http://www.microsoft.com/technet/security/Bulletin/MS99-052.mspx (http://www.microsoft.com/technet/security/Bulletin/MS99-052.mspx) For additional security-related information about Microsoft
products, please visit the following Microsoft Web site: http://www.microsoft.com/security/ (http://www.microsoft.com/security/)
For more information about Windows 98 and Windows 98 Second Edition
hotfixes, click the following article number to view the article in the Microsoft Knowledge Base:
206071 (http://support.microsoft.com/kb/206071/)
General information about Windows 98 and Windows 98 Second Edition hotfixes
| Article Translations
|
| United States | Change | | | All Microsoft Sites |
Help and Support
Back to the top
|
