CVE-1999-1199

High

Published: 07/08/1998(UTC)Updated: 16/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

6.81%

93th percentile - higher than 93% of all known CVEs

Summary

Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the 'sioux' vulnerability.

Risk Assessment

Attackers can exploit this vulnerability to overload the server, leading to its unavailability for users.

Recommendation

It is recommended to upgrade the Apache server to the latest version to mitigate the risk associated with this vulnerability.

Original NVD description (English source)

Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the "sioux" vulnerability.