{"id":"CVE-1999-1199","aliases":["EUVD-1999-1180","GHSA-chf5-9cm8-37j4"],"status":"published","title":"Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service ...","description":"Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the \"sioux\" vulnerability.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.07578,"percentile":0.94582,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"1998-08-07T04:00:00Z","modified":"2026-06-16T21:49:55Z","products":[{"vendor":"apache","product":"http_server"}],"references":[{"url":"http://www.redhat.com/support/errata/rh51-errata-general.html#apache","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=90286768232093\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=90280517007869\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=90252779826784\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=90276683825862\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e%40%3Ccvs.httpd.apache.org%3E","tags":["mailing-list","x_refsource_MLIST","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-1999-1199"},{"url":"https://lists.apache.org/thread.html/r5419c9ba0951ef73a655362403d12bb8d10fab38274deb3f005816f5@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/r9f93cf6dde308d42a9c807784e8102600d0397f5f834890708bf6920@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rf2f0f3611f937cf6cfb3b4fe4a67f69885855126110e1e3f2fb2728e@%3Ccvs.httpd.apache.org%3E"},{"url":"https://lists.apache.org/thread.html/rf6449464fd8b7437704c55f88361b66f12d5b5f90bcce66af4be4ba9@%3Ccvs.httpd.apache.org%3E"},{"url":"https://github.com/advisories/GHSA-chf5-9cm8-37j4"}],"sources":{"cve":[{"id":"CVE-1999-1199","description":"Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the \"sioux\" vulnerability.","status":"published","published":"2004-09-01T04:00:00Z","modified":"2024-08-01T17:02:53.77Z","updated_at":"2026-11-02T14:33:53.295018Z"}],"euvd":[{"id":"EUVD-1999-1180","description":"Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the \"sioux\" vulnerability.","status":"published","published":"2004-09-01T04:00:00Z","modified":"2024-08-01T17:02:53Z","updated_at":"2026-11-03T03:50:43.777799Z"}],"ghsa":[{"id":"GHSA-chf5-9cm8-37j4","title":"Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service ...","description":"Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the \"sioux\" vulnerability.","status":"published","published":"2022-04-30T18:12:00Z","modified":"2025-04-03T03:33:51Z","updated_at":"2026-11-02T15:00:36.60124Z"}],"nvd":[{"id":"CVE-1999-1199","description":"Apache WWW server 1.3.1 and earlier allows remote attackers to cause a denial of service (resource exhaustion) via a large number of MIME headers with the same name, aka the \"sioux\" vulnerability.","status":"published","published":"1998-08-07T04:00:00Z","modified":"2026-06-16T21:49:55.757Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T13:58:30.236077Z"}]}}