← All advisories

High severity7.5NVD Advisory· Published Jan 1, 1997· Updated Jun 16, 2026

CVE-1999-0236

CVE-1999-0236

Description

ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

21

Apache/HTTP Server
cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*
Range: <1.0
Ncsa/Ncsa Httpd
cpe:2.3:a:illinois:ncsa_httpd:-:*:*:*:*:*:*:*
Apache/Httpdllm-fuzzy
osv-coords18 versions
pkg:apk/chainguard/apache2 pkg:apk/chainguard/apache2-compat pkg:apk/chainguard/apache2-config pkg:apk/chainguard/apache2-config-compat pkg:apk/chainguard/apache2-data pkg:apk/chainguard/apache2-dev pkg:apk/chainguard/apache2-doc pkg:apk/chainguard/apache2-oci-entrypoint pkg:apk/chainguard/apache2-utils pkg:apk/wolfi/apache2 pkg:apk/wolfi/apache2-compat pkg:apk/wolfi/apache2-config pkg:apk/wolfi/apache2-config-compat pkg:apk/wolfi/apache2-data pkg:apk/wolfi/apache2-dev pkg:apk/wolfi/apache2-doc pkg:apk/wolfi/apache2-oci-entrypoint pkg:apk/wolfi/apache2-utils
< 2.4.63-r1+ 17 more
- (no CPE)range: < 2.4.63-r1
- (no CPE)range: < 2.4.63-r1
- (no CPE)range: < 2.4.63-r1
- (no CPE)range: < 2.4.63-r1
- (no CPE)range: < 2.4.63-r1
- (no CPE)range: < 2.4.63-r1
- (no CPE)range: < 2.4.63-r1
- (no CPE)range: < 2.4.63-r1
- (no CPE)range: < 2.4.63-r1
- (no CPE)range: < 2.4.63-r1
- (no CPE)range: < 2.4.63-r1
- (no CPE)range: < 2.4.63-r1
- (no CPE)range: < 2.4.63-r1
- (no CPE)range: < 2.4.63-r1
- (no CPE)range: < 2.4.63-r1
- (no CPE)range: < 2.4.63-r1
- (no CPE)range: < 2.4.63-r1
- (no CPE)range: < 2.4.63-r1

Patches

Vulnerability mechanics

References

1

exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0236nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.