CVE Catalog

CVE-1999-0236

HighCVSS 7.5
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Very high risk
25.79%

98th percentile - higher than 98% of all known CVEs

Summary

The ScriptAlias directory in NCSA and Apache httpd allows attackers to read CGI programs.

Risk Assessment

Attackers may gain access to sensitive information contained in CGI programs, potentially leading to further attacks on the system.

Recommendation

It is recommended to restrict access to the ScriptAlias directory and secure CGI programs against unauthorized access.

Original NVD description (English source)

ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS