Description

Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers that are not properly handled in a set_var function call in (1) tcl_cmds.c and (2) tcl_core.c.

Remediation

References

CVE-2006-4154

Related Vulnerabilities

ReviveAdserver Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-9128)

Internet Information Services Configuration Vulnerability (CVE-1999-0725)

phpMyAdmin Other Vulnerability (CVE-2004-2631)

WordPress Plugin Quick Cache (Speed Without Compromise) Unspecified Vulnerability (140725)

Craft CMS Improper Neutralization of Formula Elements in a CSV File Vulnerability (CVE-2021-41824)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2006-4154