CVE-1999-0678

Medium

Published: 17/01/1999(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

31.41%

98th percentile - higher than 98% of all known CVEs

Summary

The default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, allowing remote users to read documentation files for the entire server.

Risk Assessment

Remote users may gain access to sensitive information contained in the documentation, potentially leading to data exposure or facilitating attacks.

Recommendation

It is recommended to change the ServerRoot configuration to an appropriate location to block access to documentation files.

Original NVD description (English source)

A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server.