CVE-1999-0678
NoneCVSS
—
EPSS
31.4%
Published
Jan 17, 1999
CISA due date
—
The record
A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Chainguard | apache2 | 0 | 2.4.66-r0 |
| Chainguard | apache2-compat | 0 | 2.4.66-r0 |
| Chainguard | apache2-config | 0 | 2.4.66-r0 |
| Chainguard | apache2-config-compat | 0 | 2.4.66-r0 |
| Chainguard | apache2-data | 0 | 2.4.66-r0 |
| Chainguard | apache2-dev | 0 | 2.4.66-r0 |
| Chainguard | apache2-doc | 0 | 2.4.66-r0 |
| Chainguard | apache2-utils | 0 | 2.4.66-r0 |
| Wolfi | apache2 | 0 | 2.4.66-r0 |
| Wolfi | apache2-compat | 0 | 2.4.66-r0 |
| Wolfi | apache2-config | 0 | 2.4.66-r0 |
| Wolfi | apache2-config-compat | 0 | 2.4.66-r0 |
| Wolfi | apache2-data | 0 | 2.4.66-r0 |
| Wolfi | apache2-dev | 0 | 2.4.66-r0 |
| Wolfi | apache2-doc | 0 | 2.4.66-r0 |
| Wolfi | apache2-utils | 0 | 2.4.66-r0 |
Related vulnerabilities
- CVE-2008-2168 Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote… Also affects apache2
- CVE-2007-0450 Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and… Also affects apache2
- CVE-2007-0086 The Apache HTTP Server, when accessed through a TCP connection with a large window size… Also affects apache2
- CVE-1999-1412 A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows… Also affects apache2
- CVE-1999-0236 ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs. Also affects apache2