CVE-1999-1237: Apache HTTP Server

High severity, CVSS 10.0. EPSS: 8.1% chance of exploitation in the next 30 days.

Multiple buffer overflows in smbvalid/smbval SMB authentication library, as used in Apache::AuthenSmb and possibly other modules, allows remote attackers to execute arbitrary commands via (1) a long username, (2) a long password, and (3) other unspecified methods.

Affected products

• Apache HTTP Server: affected versions not specified

Published 1999-06-06. Last modified 2026-06-16.