CVE-2006-4154

Severity Score

6.8

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers that are not properly handled in a set_var function call in (1) tcl_cmds.c and (2) tcl_core.c.

Vulnerabilidad de cadena de formato en el módulo mod_tcl 1.0 para Apache 2.x permite a atacantes locales o remotos (dependiendo del contexto) ejecutar código de su elección mediante especificadores de cadena de formato que no se manejan adecuadamente en una llamada a la función set_var en (1) tcl_cmds.c y (2) tcl_core.c.

*Credits: N/A

CVSS Scores

NISTv2 6.8

Attack Vector

Network

Attack Complexity

Medium

Authentication

None

Confidentiality

Partial

Integrity

Partial

Availability

Partial

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2006-08-16 CVE Reserved
2006-10-16 CVE Published
2024-01-20 EPSS Updated
2024-08-07 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (10)

URL	Tag	Source
http://secunia.com/advisories/22458	Third Party Advisory
http://secunia.com/advisories/22549	Third Party Advisory
http://securitytracker.com/id?1017062	Vdb Entry
http://www.kb.cert.org/vuls/id/366020	Third Party Advisory
http://www.osvdb.org/29536	Vdb Entry
http://www.securityfocus.com/bid/20527	Vdb Entry
http://www.vupen.com/english/advisories/2006/4033	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/29550	Vdb Entry

URL	Date	SRC

URL	Date	SRC
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=421	2017-07-20

URL	Date	SRC
http://security.gentoo.org/glsa/glsa-200610-12.xml	2017-07-20

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0 Search vendor "Apache" for product "Http Server" and version "2.0"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.9 Search vendor "Apache" for product "Http Server" and version "2.0.9"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.28 Search vendor "Apache" for product "Http Server" and version "2.0.28"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.28 Search vendor "Apache" for product "Http Server" and version "2.0.28"		beta		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.28 Search vendor "Apache" for product "Http Server" and version "2.0.28"		beta, win32		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.32 Search vendor "Apache" for product "Http Server" and version "2.0.32"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.32 Search vendor "Apache" for product "Http Server" and version "2.0.32"		beta, win32		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.34 Search vendor "Apache" for product "Http Server" and version "2.0.34"		beta, win32		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.35 Search vendor "Apache" for product "Http Server" and version "2.0.35"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.36 Search vendor "Apache" for product "Http Server" and version "2.0.36"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.37 Search vendor "Apache" for product "Http Server" and version "2.0.37"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.38 Search vendor "Apache" for product "Http Server" and version "2.0.38"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.39 Search vendor "Apache" for product "Http Server" and version "2.0.39"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.40 Search vendor "Apache" for product "Http Server" and version "2.0.40"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.41 Search vendor "Apache" for product "Http Server" and version "2.0.41"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.42 Search vendor "Apache" for product "Http Server" and version "2.0.42"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.43 Search vendor "Apache" for product "Http Server" and version "2.0.43"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.44 Search vendor "Apache" for product "Http Server" and version "2.0.44"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.45 Search vendor "Apache" for product "Http Server" and version "2.0.45"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.46 Search vendor "Apache" for product "Http Server" and version "2.0.46"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.47 Search vendor "Apache" for product "Http Server" and version "2.0.47"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.48 Search vendor "Apache" for product "Http Server" and version "2.0.48"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.49 Search vendor "Apache" for product "Http Server" and version "2.0.49"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.50 Search vendor "Apache" for product "Http Server" and version "2.0.50"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.51 Search vendor "Apache" for product "Http Server" and version "2.0.51"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.52 Search vendor "Apache" for product "Http Server" and version "2.0.52"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.53 Search vendor "Apache" for product "Http Server" and version "2.0.53"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.54 Search vendor "Apache" for product "Http Server" and version "2.0.54"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.55 Search vendor "Apache" for product "Http Server" and version "2.0.55"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.56 Search vendor "Apache" for product "Http Server" and version "2.0.56"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.57 Search vendor "Apache" for product "Http Server" and version "2.0.57"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.58 Search vendor "Apache" for product "Http Server" and version "2.0.58"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.0.58 Search vendor "Apache" for product "Http Server" and version "2.0.58"		win32		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.1 Search vendor "Apache" for product "Http Server" and version "2.1"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.1.1 Search vendor "Apache" for product "Http Server" and version "2.1.1"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.1.2 Search vendor "Apache" for product "Http Server" and version "2.1.2"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.1.3 Search vendor "Apache" for product "Http Server" and version "2.1.3"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.1.4 Search vendor "Apache" for product "Http Server" and version "2.1.4"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.1.5 Search vendor "Apache" for product "Http Server" and version "2.1.5"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.1.6 Search vendor "Apache" for product "Http Server" and version "2.1.6"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.2 Search vendor "Apache" for product "Http Server" and version "2.2"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.2.1 Search vendor "Apache" for product "Http Server" and version "2.2.1"		-		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.2.2 Search vendor "Apache" for product "Http Server" and version "2.2.2"		windows		Affected
Apache Search vendor "Apache"		Http Server Search vendor "Apache" for product "Http Server"				2.2.3 Search vendor "Apache" for product "Http Server" and version "2.2.3"		windows		Affected