Unrated severityNVD Advisory· Published Mar 9, 2006· Updated Jun 16, 2026
CVE-2006-1095
CVE-2006-1095
Description
Directory traversal vulnerability in the FileSession object in Mod_python module 3.2.7 for Apache allows local users to execute arbitrary code via a crafted session cookie.
Affected products
2cpe:2.3:a:apache:mod_python:3.2.7:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apache:mod_python:3.2.7:*:*:*:*:*:*:*
- (no CPE)range: = 3.2.7
Patches
Vulnerability mechanics
References
8- secunia.com/advisories/19239nvdPatchVendor Advisory
- securitytracker.com/idnvdPatch
- www.cgisecurity.com/2006/02/07nvdPatch
- www.securityfocus.com/bid/16916nvdPatch
- www.vupen.com/english/advisories/2006/0768nvdVendor Advisory
- svn.apache.org/viewcvs.cgi/httpd/mod_python/branches/3.2.x/NEWSnvd
- www.modpython.org/fs_sec_warn.htmlnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/24965nvd
News mentions
0No linked articles in our index yet.