Description

Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers that are not properly handled in a set_var function call in (1) tcl_cmds.c and (2) tcl_core.c.

Remediation

References

CVE-2006-4154

Related Vulnerabilities

Apache Traffic Server Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2020-9494)

WordPress Plugin Login with Cognito Cross-Site Scripting (1.4.3)

WordPress 3.9.x Cross-Site Scripting Vulnerability (3.9 - 3.9.9)

Liferay Portal Incorrect Default Permissions Vulnerability (CVE-2021-38268)

PHP Out-of-bounds Read Vulnerability (CVE-2017-9118)

Severity

Medium

Classification

CVE-2006-4154

Tags

Missing Update Known Vulnerabilities