Hi
I am struggling through an audit with explaining CVE's listed on NIST that do not appear on the Apache site with any fixes.
CVE-1999-0070 is an example showing in nist site as impacting Apache, but no reference to this on the Apache security pages
Can anyone help with this sufficiently to explain to audit?
Thanks!