BlackKite: Home
Menu

PUBLISHED DATE: January 17, 1999CVE-1999-0678:
Default Configuration Vulnerability

CVSS:
5
EPSS:
1719.40%
Exploitability:
10
In KEV:
No
Description

A default configuration of Apache on Debian GNU/Linux sets the ServerRoot to /usr/doc, which allows remote users to read documentation files for the entire server.

Products
Questions to Ask Vendors
  1. Can you confirm whether your systems are affected by CVE-1999-0678, and if so, what steps are you currently taking to mitigate this vulnerability?
  2. What is your estimated timeline for fully resolving CVE-1999-0678 in your products or services, and how will you communicate updates on this issue to us as your customer?
Recommended Actions
References

Ready to get results you can trust?