$ cve CVE-1999-0236 JSON

CVE-1999-0236 EXPLOIT

7.5

HIGH · CVSS 3.1 · EPSS 25.8% (pctl 98)

Patch early

A public exploit exists.

ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.

CVSS	7.5 (HIGH, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
EPSS	25.79% — more likely to be exploited than 98% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	1997-01-01
Last modified	2026-06-16

Vendor	Product
apache	http server
illinois	ncsa httpd

Source	Title	Date
exploit-db	NCSA 1.3/1.4.x/1.5 / Apache HTTPd 0.8.11/0.8.14 - ScriptAlias Source Retrieval	1999-09-25