PT-1998-1143 · Excite · Excite For Web Servers

Published 1998-11-30 · Updated 2016-10-18 · CVE-1999-1073

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Excite for Web Servers (EWS) version 1.1

Description The issue allows an attacker to more easily guess passwords via brute force or dictionary attacks because the first two characters of a plaintext password are recorded in the beginning of the encrypted password.

Recommendations For Excite for Web Servers (EWS) version 1.1, consider changing passwords to strong, unique ones and restricting access to sensitive areas of the web server until a fix is available. As a temporary workaround, restrict the use of weak passwords and monitor for suspicious login attempts. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-1999-1073

Affected Products

Excite For Web Servers

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-1999-1073 · Security Note
• http://marc.info/?l=bugtraq&m=91248445931140&w=2 · Note