Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-1999-0236 — Sensitive Information Exposure in Apache Http Server

CWE-200 — Sensitive Information Exposure5 documents5 sources
Severity
7.5HIGHNVD
EPSS
17.6%
top 4.89%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Apache Http Server
Timeline
PublishedJan 1
Latest updateApr 30

Description

ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:NExploitability: 3.9 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-xgp2-4cpq-g2m7: ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs↗2022-04-30
▶
CVEList
CVE-1999-0236: ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs↗1999-09-29
▶

💥Exploits & PoCs

1
Exploit-DB
NCSA 1.3/1.4.x/1.5 / Apache HTTPd 0.8.11/0.8.14 - ScriptAlias Source Retrieval↗1999-09-25
▶

📋Vendor Advisories

1
Microsoft
CVE-1999-0236: NIST NVD Details: https://nvd↗2020-09-08
▶
CVE-1999-0236 — Sensitive Information Exposure | cvebase