CVE-1999-0776

CVSS 2.0 Score 5 of 10 (medium)

Details

Published May 12, 1999
Updated: Nov 20, 2024

Summary

CVE-1999-0776 is a vulnerability affecting the Alibaba HTTP server. An attacker can exploit this issue by making use of ".." (dot dot) symbols in a request, enabling them to read arbitrary files on the targeted system. This vulnerability poses a significant risk, as an attacker could potentially access sensitive information or gain unauthorized access to the system. It is essential for Alibaba HTTP server users to apply the available patch or upgrade to a secure version to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share