CVE-1999-0236
High · 7.5CVSS
7.5
EPSS
25.8%
Published
Jan 1, 1997
CISA due date
—
The record
ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Chainguard | apache2 | 0 | 2.4.63-r1 |
| Chainguard | apache2-compat | 0 | 2.4.63-r1 |
| Chainguard | apache2-config | 0 | 2.4.63-r1 |
| Chainguard | apache2-config-compat | 0 | 2.4.63-r1 |
| Chainguard | apache2-data | 0 | 2.4.63-r1 |
| Chainguard | apache2-dev | 0 | 2.4.63-r1 |
| Chainguard | apache2-doc | 0 | 2.4.63-r1 |
| Chainguard | apache2-oci-entrypoint | 0 | 2.4.63-r1 |
| Chainguard | apache2-utils | 0 | 2.4.63-r1 |
| Wolfi | apache2 | 0 | 2.4.63-r1 |
| Wolfi | apache2-compat | 0 | 2.4.63-r1 |
| Wolfi | apache2-config | 0 | 2.4.63-r1 |
| Wolfi | apache2-config-compat | 0 | 2.4.63-r1 |
| Wolfi | apache2-data | 0 | 2.4.63-r1 |
| Wolfi | apache2-dev | 0 | 2.4.63-r1 |
| Wolfi | apache2-doc | 0 | 2.4.63-r1 |
| Wolfi | apache2-oci-entrypoint | 0 | 2.4.63-r1 |
| Wolfi | apache2-utils | 0 | 2.4.63-r1 |
Related vulnerabilities
- CVE-2008-2168 Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote… Also affects apache2
- CVE-2007-0450 Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and… Also affects apache2
- CVE-2007-0086 The Apache HTTP Server, when accessed through a TCP connection with a large window size… Also affects apache2
- CVE-1999-1412 A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows… Also affects apache2
- CVE-1999-0678 A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc… Also affects apache2