CVE-1999-0678: Medium severity Apache HTTP Server vulnerability
Published Jan 17, 1999
·Updated
A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server.
Affected Software
4 affected components
Apache HTTP Server
Debian Debian Linux=2.1
All of the following
Apache HTTP Server
Debian Debian Linux=2.1
Event History
Jan 17, 1999
CVE Published
via NVD·05:00 AM
Data Sourced
via NVD·05:00 AM
DescriptionSeverityAffected Software
Data Sourced
05:00 AM
DescriptionWeaknessAffected Software
Mar 22, 2000
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-1999-0678?
CVE-1999-0678 has a moderate severity rating due to the exposure of sensitive documentation files.
2
How do I fix CVE-1999-0678?
To fix CVE-1999-0678, you should change the ServerRoot configuration in Apache to a more secure directory.
3
Who is affected by CVE-1999-0678?
CVE-1999-0678 affects users running a default configuration of Apache on Debian GNU/Linux version 2.1.
4
What kind of data can be exposed by CVE-1999-0678?
CVE-1999-0678 can expose documentation files that contain sensitive information about the server configuration.
5
Is CVE-1999-0678 still a threat today?
While CVE-1999-0678 is an older vulnerability, it can still pose a risk on systems that have not been properly secured or updated.