CVE-1999-0776

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Alibaba HTTP server allows remote attackers to read files via a .. (dot dot) attack.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published
May 12, 1999
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 1999

CVE-1999-07777.5IIS FTP servers may allow a remote attacker to read or delete files on the server, even if they have "No Access" permissions.CVE-1999-07787.2Buffer overflow in Xi Graphics Accelerated-X server allows local users to gain root access via a long display or query parameter.CVE-1999-07845.0Denial of service in Oracle TNSLSNR SQL*Net Listener via a malformed string to the listener port, aka NERP.CVE-1999-07857.2The INN inndstart program allows local users to gain root privileges via the "pathrun" parameter in the inn.conf file.CVE-1999-07864.6The dynamic linker in Solaris allows a local user to create arbitrary files via the LD_PROFILE environmental variable and a symlink attack.CVE-1999-07872.1The SSH authentication agent follows symlinks via a UNIX domain socket.CVE-1999-07885.0Arkiea nlservd allows remote attackers to conduct a denial of service.CVE-1999-078910.0Buffer overflow in AIX ftpd in the libc library.CVE-1999-07902.6A remote attacker can read information from a Netscape user's cache via JavaScript.CVE-1999-079110.0Hybrid Network cable modems do not include an authentication mechanism for administration, allowing remote attackers to compromise the systeCVE-1999-07932.6Internet Explorer allows remote attackers to read files by redirecting data to a Javascript applet.CVE-1999-07944.6Microsoft Excel does not warn a user when a macro is present in a Symbolic Link (SYLK) format file.
CVE-1999-0776: Medium severity, CVSS 5.0 | Vulnix