CVE-1999-0678: Apache HTTP Server

Medium severity, CVSS 5.0. EPSS: 31.4% chance of exploitation in the next 30 days.

A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server.

Affected products

• Apache HTTP Server: affected versions not specified

Published 1999-01-17. Last modified 2026-06-16.