CVE-1999-1199

Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service ...

10.0 High

Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the "sioux" vulnerability.

Exploit likelihood

7.58%Up 4.2 points since Feb 4, 2022

What each source reports

NVD Score used 10.0

Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the "sioux" vulnerability.

Record: CVE-1999-1199
CVSS 2.0: 10.0 HighAV:N/AC:L/Au:N/C:C/I:C/A:C
Updated: 2026-11-02

CVE List No score

Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the "sioux" vulnerability.

Record: CVE-1999-1199
Updated: 2026-11-02

EUVDEUVD-1999-1180 No score

Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the "sioux" vulnerability.

Record: EUVD-1999-1180
Updated: 2026-11-03

GitHub AdvisoriesGHSA-chf5-9cm8-37j4 No score

Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service ...

Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the "sioux" vulnerability.

Record: GHSA-chf5-9cm8-37j4
Updated: 2026-11-02

Affected products

apache http server

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-1999-1199 is a high vulnerability (CVSS 10.0) in Apache Http Server, published August 7, 1998. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.58%, the 94th percentile. No source names a fixed version.

References

Show 9 moreShow less