Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers that are not properly handled in a set_var function call in (1) tcl_cmds.c and (2) tcl_core.c.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:15
Type | Values Removed | Values Added |
---|---|---|
References | () http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=421 - Patch, Vendor Advisory | |
References | () http://secunia.com/advisories/22458 - | |
References | () http://secunia.com/advisories/22549 - | |
References | () http://security.gentoo.org/glsa/glsa-200610-12.xml - | |
References | () http://securitytracker.com/id?1017062 - | |
References | () http://www.kb.cert.org/vuls/id/366020 - US Government Resource | |
References | () http://www.osvdb.org/29536 - | |
References | () http://www.securityfocus.com/bid/20527 - | |
References | () http://www.vupen.com/english/advisories/2006/4033 - | |
References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/29550 - |
Information
Published : 2006-10-16 19:07
Updated : 2024-11-21 00:15
NVD link : CVE-2006-4154
Mitre link : CVE-2006-4154
CVE.ORG link : CVE-2006-4154
JSON object : View
Products Affected
apache
- http_server
CWE