CVE-1999-1072

Summary

CVE-1999-1072 is a vulnerability affecting Excite for Web Servers (EWS) version 1.1. An attacker can locally access the encrypted password from the world-readable Architext.conf file. By obtaining the encrypted password, an attacker can replay it in an HTTP request to either AT-generated.cgi or AT-admin.cgi, thereby gaining privileges on the affected system. This issue can lead to serious security consequences if not addressed promptly. Users of EWS 1.1 are advised to upgrade to a patched version or to take measures to secure the Architext.conf file.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.