CVE-2006-4154

Published: Oct 16, 2006Modified: Apr 23, 2026

6.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability: 8.6 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers that are not properly handled in a set_var function call in (1) tcl_cmds.c and (2) tcl_core.c.

Affected (44)

Products: Apache: Http Server

Apache

1 product

Http Server

Configuration A

44 vulnerable

Vulnerable Software	Affected Versions
Apache Http Server	Version 2.0.28
Apache Http Server	Version 2.0.28 beta
Apache Http Server	Version 2.0.28 beta
Apache Http Server	Version 2.0.32
Apache Http Server	Version 2.0.32 beta
Apache Http Server	Version 2.0.34 beta
Apache Http Server	Version 2.0.35
Apache Http Server	Version 2.0.36
Apache Http Server	Version 2.0.37
Apache Http Server	Version 2.0.38
Apache Http Server	Version 2.0.39
Apache Http Server	Version 2.0.40
Apache Http Server	Version 2.0.41
Apache Http Server	Version 2.0.42
Apache Http Server	Version 2.0.43
Apache Http Server	Version 2.0.44
Apache Http Server	Version 2.0.45
Apache Http Server	Version 2.0.46
Apache Http Server	Version 2.0.47
Apache Http Server	Version 2.0.48
Apache Http Server	Version 2.0.49
Apache Http Server	Version 2.0.50
Apache Http Server	Version 2.0.51
Apache Http Server	Version 2.0.52
Apache Http Server	Version 2.0.53
Apache Http Server	Version 2.0.54
Apache Http Server	Version 2.0.55
Apache Http Server	Version 2.0.56
Apache Http Server	Version 2.0.57
Apache Http Server	Version 2.0.58
Apache Http Server	Version 2.0.58
Apache Http Server	Version 2.0.9
Apache Http Server	Version 2.0
Apache Http Server	Version 2.1.1
Apache Http Server	Version 2.1.2
Apache Http Server	Version 2.1.3
Apache Http Server	Version 2.1.4
Apache Http Server	Version 2.1.5
Apache Http Server	Version 2.1.6
Apache Http Server	Version 2.1
Apache Http Server	Version 2.2.1
Apache Http Server	Version 2.2.2
Apache Http Server	Version 2.2.3
Apache Http Server	Version 2.2