CVE-1999-1177: Lincoln D. Stein Nph-Publish

Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the pathname for an upload operation.

Affected products

Published 1999-12-31. Last modified 2026-06-16.