Evil-DB LogoEvil-DB
← All CVEs

CVE-2006-4154

medium · 6.8

Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers that are not properly handled in a set_var function call in (1) tcl_cmds.c and (2) tcl_core.c.

6.8
CVSS
16.4%
EPSS (exploit prob.)
97th
EPSS percentile
2006-10-16
Published

AV:N/AC:M/Au:N/C:P/I:P/A:P

Affected products

VendorProductAffected versions
apachehttp_server2.0
apachehttp_server2.0.9
apachehttp_server2.0.28
apachehttp_server2.0.28
apachehttp_server2.0.28
apachehttp_server2.0.32
apachehttp_server2.0.32
apachehttp_server2.0.34
apachehttp_server2.0.35
apachehttp_server2.0.36
apachehttp_server2.0.37
apachehttp_server2.0.38
apachehttp_server2.0.39
apachehttp_server2.0.40
apachehttp_server2.0.41
apachehttp_server2.0.42
apachehttp_server2.0.43
apachehttp_server2.0.44
apachehttp_server2.0.45
apachehttp_server2.0.46
apachehttp_server2.0.47
apachehttp_server2.0.48
apachehttp_server2.0.49
apachehttp_server2.0.50
apachehttp_server2.0.51
apachehttp_server2.0.52
apachehttp_server2.0.53
apachehttp_server2.0.54
apachehttp_server2.0.55
apachehttp_server2.0.56
apachehttp_server2.0.57
apachehttp_server2.0.58
apachehttp_server2.0.58
apachehttp_server2.1
apachehttp_server2.1.1
apachehttp_server2.1.2
apachehttp_server2.1.3
apachehttp_server2.1.4
apachehttp_server2.1.5
apachehttp_server2.1.6

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2006-4154