## Description

Excite for Web Servers (EWS) 1.1 records the first two characters of a plaintext password in the beginning of the encrypted password, which makes it easier for an attacker to guess passwords via a brute force or dictionary attack.

## Severity

Overall Severity: N/A

### CVSS Metrics

Type | Score | Severity | Vector
--- | --- | --- | ---

## Affected Products

### excite - ews

Affected Versions:

- 1.1

## References

- http://marc.info/?l=bugtraq&m=91248445931140&w=2
- http://marc.info/?l=bugtraq&m=91248445931140&w=2

Neural Processor Active