What’s Vulnerable › Vulnerabilities

CVE-1999-0007

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 8.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 1999-09-29 · updated 2026-06-16
• Weakness: CWE-327

Description

Information from SSL-encrypted sessions via PKCS #1.

Affected products

• C2Net Stonghold Web Server: 2.0.1, 2.2, 2.3 (and their updates)
• HP Open Market Secure Webserver: 2.1 (and their updates)
• Microsoft Exchange Server: 5.5
• Microsoft Internet Information Server: 3.0, 4.0 (and their updates)
• Microsoft Site Server: 3.0 (and their updates)
• Netscape Certificate Server: 1.0-patch1
• Netscape Collabra Server: 3.5.2 (and their updates)
• Netscape Directory Server: 1.3-patch5, 3.1-patch1; 3.12 (and their updates)
• Netscape Enterprise Server: 2.0, 3.0.1b, 3.5.1 (and their updates)
• Netscape Fasttrack Server: 3.01b (and their updates)
• Netscape Messaging Server: 3.54 (and their updates)
• Netscape Proxy Server: 3.5.1 (and their updates)
• Ssleay: 0.6.6, 0.8.1, 0.9 (and their updates)

References

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-002
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/1998/ms98-002

Get alerted when CVE-1999-0007 or the next vulnerability affects your stack