CVE-1999-1412
NoneCVSS
—
EPSS
35.9%
Published
Jun 3, 1999
CISA due date
—
The record
A possible interaction between Apple MacOS X release 1.0 and Apache HTTP server allows remote attackers to cause a denial of service (crash) via a flood of HTTP GET requests to CGI programs, which generates a large number of processes.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Chainguard | apache2 | 0 | 2.4.63-r1 |
| Chainguard | apache2-compat | 0 | 2.4.63-r1 |
| Chainguard | apache2-config | 0 | 2.4.63-r1 |
| Chainguard | apache2-config-compat | 0 | 2.4.63-r1 |
| Chainguard | apache2-data | 0 | 2.4.63-r1 |
| Chainguard | apache2-dev | 0 | 2.4.63-r1 |
| Chainguard | apache2-doc | 0 | 2.4.63-r1 |
| Chainguard | apache2-oci-entrypoint | 0 | 2.4.63-r1 |
| Chainguard | apache2-utils | 0 | 2.4.63-r1 |
| Wolfi | apache2 | 0 | 2.4.63-r1 |
| Wolfi | apache2-compat | 0 | 2.4.63-r1 |
| Wolfi | apache2-config | 0 | 2.4.63-r1 |
| Wolfi | apache2-config-compat | 0 | 2.4.63-r1 |
| Wolfi | apache2-data | 0 | 2.4.63-r1 |
| Wolfi | apache2-dev | 0 | 2.4.63-r1 |
| Wolfi | apache2-doc | 0 | 2.4.63-r1 |
| Wolfi | apache2-oci-entrypoint | 0 | 2.4.63-r1 |
| Wolfi | apache2-utils | 0 | 2.4.63-r1 |
Related vulnerabilities
- CVE-2008-2168 Cross-site scripting (XSS) vulnerability in Apache 2.2.6 and earlier allows remote… Also affects apache2
- CVE-2007-0450 Directory traversal vulnerability in Apache HTTP Server and Tomcat 5.x before 5.5.22 and… Also affects apache2
- CVE-2007-0086 The Apache HTTP Server, when accessed through a TCP connection with a large window size… Also affects apache2
- CVE-1999-0678 A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc… Also affects apache2
- CVE-1999-0236 ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs. Also affects apache2