Excite for Web Servers (EWS) 1.1 vulnerabilities
4 known CVE vulnerabilities in Excite for Web Servers (EWS) 1.1, translated and rated.
- CVE-1999-1071High
Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, allowing local users to gain access to Excite accounts by modifying the file.
- CVE-1999-1073High
Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password at the beginning of the encrypted password, making it easier for attackers to guess passwords via brute force or dictionary attacks.
- CVE-1999-1072High
Excite for Web Servers (EWS) version 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi.
- CVE-1999-0279High
Excite for Web Servers (EWS) allows remote command execution via shell metacharacters.