PT-1998-1141 · Excite · Excite For Web Servers

Publicado 1998-11-30 · Atualizado 2017-12-19 · CVE-1999-1071

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Excite for Web Servers (EWS) version 1.1

Description The issue allows local users to gain access to Excite accounts by modifying the Architext.conf authentication file, which is installed with world-writeable permissions.

Recommendations For Excite for Web Servers (EWS) version 1.1, change the permissions of the Architext.conf file to prevent world-writeable access.

Correção

Identificadores relacionados

CVE-1999-1071

Produtos afetados

Excite For Web Servers

Referências · 3

• http://marc.info/?l=bugtraq&m=91248445931140&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-1999-1071 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/1417 · Nota