
CVE-1999-0071
https://notcve.org/view.php?id=CVE-1999-0071
01 Sep 1997 — Apache httpd cookie buffer overflow for versions 1.1.1 and earlier. • https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0071 •

CVE-1999-0045 – Apache 1.1 / NCSA HTTPd 1.5.2 / Netscape Server 1.12/1.1/2.0 - a nph-test-cgi
https://notcve.org/view.php?id=CVE-1999-0045
10 Dec 1996 — List of arbitrary files on Web host via nph-test-cgi script. • https://www.exploit-db.com/exploits/19536 •

CVE-1999-0070 – Apache 0.8.x/1.0.x / NCSA HTTPd 1.x - 'test-cgi' Directory Listing
https://notcve.org/view.php?id=CVE-1999-0070
01 Apr 1996 — test-cgi program allows an attacker to list files on the server. • https://www.exploit-db.com/exploits/20435 •

CVE-1999-0067
https://notcve.org/view.php?id=CVE-1999-0067
20 Mar 1996 — phf CGI program allows remote command execution through shell metacharacters. • http://www.cert.org/advisories/CA-1996-06.html • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •