CVE-1999-0236: Apache HTTP Server

High severity, CVSS 7.5. EPSS: 25.8% chance of exploitation in the next 30 days.

ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.

Affected products

  • Apache HTTP Server: before 1.0 (fixed in 1.0)
  • Illinois Ncsa Httpd: affected versions not specified

Published 1997-01-01. Last modified 2026-06-16.