CVE-1999-1006

Medium

Published: 19/12/1999(UTC)Updated: 16/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.48%

70th percentile - higher than 70% of all known CVEs

The Groupwise web server (GWWEB.EXE) allows remote attackers to determine the real path of the web server via the HELP parameter.

Attackers may exploit this vulnerability to gain information about the server's structure, potentially leading to further attacks.

It is recommended to block access to the HELP parameter or implement appropriate security measures to prevent path disclosure.

Original NVD description (English source)

Groupwise web server GWWEB.EXE allows remote attackers to determine the real path of the web server via the HELP parameter.