CVE-1999-0279
HighExploitation Probability (EPSS)
High risk89th percentile - higher than 89% of all known CVEs
Summary
Excite for Web Servers (EWS) allows remote command execution via shell metacharacters.
Risk Assessment
Exploitation of this vulnerability could lead to full control over the server by an attacker, posing a serious security threat to the organization.
Recommendation
It is recommended to update EWS software to the latest version and implement appropriate security measures to minimize the risk of remote command execution.
Other vulnerabilities in Excite for Web Servers (EWS)
See all- CVE-1999-1071High
Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, allowing local users to gain access to Excite accounts by modifying the file.
- CVE-1999-1073High
Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password at the beginning of the encrypted password, making it easier for attackers to guess passwords via brute force or dictionary attacks.
- CVE-1999-1072High
Excite for Web Servers (EWS) version 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi.
Original NVD description (English source)
Excite for Web Servers (EWS) allows remote command execution via shell metacharacters.