What’s Vulnerable › Vulnerabilities
CVE-1999-0678
- Severity: medium (CVSS 5.0 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 31.4% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 1999-01-17 · updated 2026-06-16
Description
A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server.
Affected products
- Apache HTTP Server: all versions
References
Get alerted when CVE-1999-0678 or the next vulnerability affects your stack