CVE List
| Id | CVE No. | Status | Description | Phase | Votes | Comments | Actions |
|---|---|---|---|---|---|---|---|
| 1051 | CVE-1999-1071 | Candidate | Excite for Web Servers (EWS) 1.1 installs the Architext.conf authentication file with world-writeable permissions, which allows local users to gain access to Excite accounts by modifying the file. | Proposed (20010912) | ACCEPT(1) Frech | NOOP(3) Cole, Foat, Wall | View | |
| 1052 | CVE-1999-1072 | Candidate | Excite for Web Servers (EWS) 1.1 allows local users to gain privileges by obtaining the encrypted password from the world-readable Architext.conf authentication file and replaying the encrypted password in an HTTP request to AT-generated.cgi or AT-admin.cgi. | Proposed (20010912) | NOOP(3) Cole, Foat, Wall | View | |
| 1053 | CVE-1999-1073 | Candidate | Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the beginning of the encrypted password, which makes it easier for an attacker to guess passwords via a brute force or dictionary attack. | Proposed (20010912) | NOOP(3) Cole, Foat, Wall | View | |
| 1054 | CVE-1999-1074 | Entry | Webmin before 0.5 does not restrict the number of invalid passwords that are entered for a valid username, which could allow remote attackers to gain privileges via brute force password cracking. | View | |||
| 1055 | CVE-1999-1075 | Candidate | inetd in AIX 4.1.5 dynamically assigns a port N when starting ttdbserver (ToolTalk server), but also inadvertently listens on port N-1 without passing control to ttdbserver, which allows remote attackers to cause a denial of service via a large number of connections to port N-1, which are not properly closed by inetd. | Proposed (20010912) | MODIFY(1) Frech | NOOP(3) Cole, Foat, Wall | Frech> XF:aix-ttdbserver(813) | CONFIRM:APAR IX70400 | View |
Page 211 of 20943, showing 5 records out of 104715 total, starting on record 1051, ending on 1055
