Unscored CVE-1999-1072 EUVD-1999-1053GHSA-9ccm-5r3x-gxvr

Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architex…

Published Sep 12, 2001 · Updated Aug 1, 2024 · Assigned by mitre

Description

Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi.

References

19981130 Security bugs in Excite for Web Servers 1.1 mailing-list