Vulnerability in Excite Ews
CVE-1999-1073
Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the beginning of the encrypted password, which makes it easier for an attacker to guess passwords via a brute force or dictionary attack.
EPSS: 0.004 (29.8th percentile) — read the EPSS interpretation.
Affected products
- Excite Ews — versions 1.1
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)