| Max CVSS | 7.2 | Min CVSS | 7.2 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-1999-1071 | 7.2 |
Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file.
|
19-12-2017 - 02:29 | 30-11-1998 - 05:00 | |
| CVE-1999-1073 | 7.2 |
Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the beginning of the encrypted password, which makes it easier for an attacker to guess passwords via a brute force or dictionary attack.
|
18-10-2016 - 02:00 | 30-11-1998 - 05:00 | |
| CVE-1999-1072 | 7.2 |
Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-ad
|
18-10-2016 - 02:00 | 30-11-1998 - 05:00 |