CVE-1999-0045

Description

List of arbitrary files on Web host via nph-test-cgi script.

Affected products

• apache / http_server0.8.11 – 0.8.11
• apache / http_server0.8.14 – 0.8.14
• apache / http_server1.0 – 1.0
• apache / http_server1.0.2 – 1.0.2
• apache / http_server1.0.3 – 1.0.3
• apache / http_server1.0.5 – 1.0.5
• apache / http_server1.1 – 1.1
• netscape / commerce_server1.12 – 1.12
• netscape / communications_server1.1 – 1.1
• netscape / communications_server1.12 – 1.12
• netscape / enterprise_server2.0a – 2.0a

Exploits & proofs of concept

• exploit-dbApache 1.1 / NCSA HTTPd 1.5.2 / Netscape Server 1.12/1.1/2.0 - a nph-test-cgiby Josh Richards

References

• MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0045