high7.5Public exploit code
CVE-1999-0236
ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- NCSA 1.3/1.4.x/1.5 / Apache HTTPd 0.8.11/0.8.14 - ScriptAlias Source Retrieval1999-09-25 · remote · multiple · Verified
Impact
ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Http Server | before 1.0 |
| Illinois | Ncsa Httpd | All versions |