CVE-1999-1072

Summary

CVE-1999-1072 is a vulnerability affecting Excite for Web Servers (EWS) version 1.1. This issue grants local users the ability to elevate their privileges by extracting encrypted passwords from the world-readable Architext.conf file. They can then reuse these encrypted passwords to authenticate and access sensitive data through AT-generated.cgi or AT-admin.cgi. This exposure of confidential information allows unauthorized access and potential system compromise.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.