CVE-1999-0045

CVSS 2.0 Score 7.5 of 10 (high)

Details

Published Dec 10, 1996
Updated: Nov 20, 2024

Summary

CVE-1999-0045 is a vulnerability affecting the nph-test-cgi script on certain web servers. Hackers can exploit this weakness to list arbitrary files on the host system, potentially gaining unauthorized access to sensitive data or installing malicious code. The vulnerability arises due to insufficient input validation in the script, allowing attackers to manipulate file names and access unintended files. This issue underscores the importance of proper input validation and access control measures in web applications to prevent unauthorized access and data breaches.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Apache Software Foundation Apache HTTP Server

Affected Vendors

  • Apache Software Foundation