Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Format string vulnerability in the mod_tcl module 1.0 for Apache 2.x allows context-dependent attackers to execute arbitrary code via format string specifiers that are not properly handled in a set_var function call in (1) tcl_cmds.c and (2) tcl_core.c.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apache mod_tcl模块远程格式串处理漏洞
Vulnerability Description
Apache是一款开放源代码WEB服务程序。 Apache的mod_tcl模块中存在编程错误，成功利用这个漏洞的攻击者可能以httpd的权限执行任意指令。 mod_tcl模块允许将用户提供的数据做为一些参数的格式串标识符传送给内部定义变量参数函数。set_var函数声明如下： mod_tcl.h:117:void set_var(Tcl_Interp *interp, char *var1, char *var2, const char *fmt, ...); 对这个函数有几个不安全调用： tcl_cmd
CVSS Information
N/A
Vulnerability Type
N/A