CVE-1999-0776
CVSS 2.0 Score 5 of 10 (medium)
Details
Published May 12, 1999
Updated: Nov 20, 2024
Summary
CVE-1999-0776 is a vulnerability affecting the Alibaba HTTP server. An attacker can exploit this issue by making use of ".." (dot dot) symbols in a request, enabling them to read arbitrary files on the targeted system. This vulnerability poses a significant risk, as an attacker could potentially access sensitive information or gain unauthorized access to the system. It is essential for Alibaba HTTP server users to apply the available patch or upgrade to a secure version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share