ScriptAlias directory in NCSA and Apache httpd allowed attackers to read CGI programs.
NVD-CWE-noinfo