cbcvebase.
CVE-2006-4154
published 2006-10-16

CVE-2006-4154: Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers…

PriorityP340medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
16.42%
97.0th percentile
Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers that are not properly handled in a set_var function call in (1) tcl_cmds.c and (2) tcl_core.c.

Affected

40 ranges· showing 25
VendorProductVersion rangeFixed in
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
apachehttp_server——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.