Description
Windows 95 uses weak encryption for the password list (.pwl) file used when password caching is enabled, which allows local users to gain privileges by decrypting the passwords.
References
- 19980120 How to recover private keys for various Microsoft products mailing-list
- win95-nbsmbpwl(71) vdb-entry
- Q140557 vendor-advisory
- 19951205 Cracked: WINDOWS.PWL mailing-list
- 19980121 How to recover private keys for various Microsoft products mailing-list