Microsoft Windows 98/98SE Security Patch: Share Level Password Vulnerability 10-10-00

Microsoft Windows 98/98SE provides a password protection feature referred to as (share level access) for the File and Print Sharing service. However, due to the way the password feature is currently implemented, a file share could be compromised, by a malicious user who used a special client utility, without that user knowing the entire password required to access that share.Only share level access permissions are vulnerable. If a Windows 98/98SE machine were part of a Windows NT domain, user-level access controls could be enforced on file shares and passwords would not be needed to allow access to those shares. Windows NT and Windows 2000 machines can only be setup with user-level file share access controls and are not susceptible to this vulnerability.