Certified Ethical Hacker (CEH) — Question 27

Windows LAN Manager (LM) hashes are known to be weak.
Which of the following are known weaknesses of LM? (Choose three.)

Answer options

• A. Converts passwords to uppercase.
• B. Hashes are sent in clear text over the network.
• C. Makes use of only 32-bit encryption.
• D. Effective length is 7 characters.

Correct answer: A, B, D

Explanation

The correct answers A, B, and D highlight significant flaws in LM hashing: it converts all passwords to uppercase, which limits complexity; it transmits hashes in clear text, making them susceptible to interception; and it restricts effective password length to 7 characters, severely reducing security. Option C is incorrect because LM does not use encryption in the traditional sense; rather, it hashes passwords, which is a fundamentally different process.