CVE-1999-0776

Medium

Published: 12/05/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.44%

70th percentile - higher than 70% of all known CVEs

Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack.

Attackers may gain access to sensitive data on the server, potentially leading to privacy breaches and information security issues.

It is recommended to update the Alibaba HTTP server to the latest version and implement appropriate security measures to block dot dot attacks.

Original NVD description (English source)

Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack.