Description
Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers that are not properly handled in a set_var function call in (1) tcl_cmds.c and (2) tcl_core.c.
References
- 20527 vdb-entry
- 1017062 vdb-entry
- 22549 third-party-advisory
- 29536 vdb-entry
- 20061013 Apache HTTP Server mod_tcl set_var Format String Vulnerability third-party-advisory
- ADV-2006-4033 vdb-entry
- GLSA-200610-12 vendor-advisory
- 22458 third-party-advisory
- modtcl-setvar-format-string(29550) vdb-entry
- VU#366020 third-party-advisory