Korean
<< Back
VID 27048
Severity 30
Port 135
Protocol TCP
Class WMI
Detailed Description Password using common words and phrases can get permission to steal account through brute force attack to attempt all possible character combinations and dictionary attacks. If you set a minimum password length of 8 characters the user can easily remember and can defend against brute force attacks.

* Platforms Affected:
Microsoft Windows Any version
Recommendation Setting the 'Minimum password length' value over '8' characters.

1. Run> SECPOL.MSC> Account Policies> Password Policy
2. Setting the 'Minimum password length' value over '8' characters.
Related URL (CVE)
Related URL (SecurityFocus)
Related URL (ISS)