s1
--:--:--UTC

Searching APEX

Starting…

  1. ○ Searching Threats, IOCs & Threat Intelligence locally
  2. ○ Querying external providers
  3. ○ Asking AI Forensic Validator
  4. ○ Creating new entry from validated hit

0s elapsed

CVE-1999-1072 high

📛 Threat Title

CVE-1999-1072

Category: vulnerability Published: Source updated: First seen: Last updated: Source: NVD Recent CVEs

Description

Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi.

Indicators of Compromise (0)

No indicators of compromise on this threat.

References (2)

  • cve@mitre.org NVD Recent CVEs
  • NVD detail: CVE-1999-1072 NVD Recent CVEs

    Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi.

Remediations (10)

  • web:community.ibm.com

    The CVE Process: How to Identify, Respond to, and Mitigate Vulnerabilities Author Information Author Names: Himanshu Karmarkar and Nishant Singhai Introduction As you may be aware, the number of reported CVEs has been increasing exponentially over the past few years. This surge in CVEs has left many organizations struggling to keep pace with the sheer volume of vulnerabilities, making it ...

  • web:cvevault.com

    CVE Vault - Search and explore Common Vulnerabilities and Exposures ( CVE ) database. Find security vulnerabilities by CVE ID, vendor, severity, and year. Stay secure with comprehensive CVE information.

  • web:portal.msrc.microsoft.com

    The Security Update Guide provides information on the latest Microsoft security updates, helping users understand and address potential vulnerabilities effectively.

  • web:scanoncomputer.com

    Explore advanced DoD patch repository and management strategies, tools, and compliance. Stay secure with real-world guides, threat intelligence, and global best practices.

  • web:support.servicenow.com

    Overview The advisories below document publicly disclosed Common Vulnerabilities and Exposures ( CVEs ) in the Now Platform by ServiceNow. Because ServiceNow uses various methods to communicate vulnerability information, patches, and other fixes, customers should review family, security patch , and hotfix release notes, which are available at https://docs.servicenow.com, for a complete list of ...

  • web:translate.google.com

    Google's service, offered free of charge, instantly translates words, phrases, and web pages between English and over 100 other languages.

  • web:www.cve.org

    At cve .org, we provide the authoritative reference method for publicly known information-security vulnerabilities and exposures

  • web:www.cvefind.com

    CVE Find is a real-time vulnerability database indexing 351 731 security flaws ( CVE ) from MITRE, NVD, CISA KEV, CWE and CAPEC. 1311 new CVEs were published in the last 7 days. Data aggregated from: MITRE Corporation ( CVE , CWE, CAPEC), National Vulnerability Database - NIST (NVD), CISA Known Exploited Vulnerabilities (KEV), FIRST (EPSS).

  • web:www.nist.gov

    NIST maintains the National Vulnerability Database (NVD), a repository of information on software and hardware flaws that can compromise computer security. This is a key piece of the nation's cybersecurity infrastructure.

  • web:www.virustotal.com

    VirusTotal is a platform for scanning files and URLs for viruses, malware, and other threats using multiple antivirus engines.

AI Forensic Analysis

Only Available for Registered Users. Sign in to view.