CVE-1999-1051

CVE-1999-1051 describes a medium-severity vulnerability in the default configuration of the Matt Wright FormHandler.cgi script. This flaw allows remote, unauthenticated attackers to read arbitrary files on the server by manipulating the 'reply_message_attach' parameter, as the script only restricts access to the /etc/ directory but permits arbitrary directories for attachments. The attack is low complexity, requiring no authentication, and results in a compromise of confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this very old vulnerability.