CVE-2006-1095

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2006-03-09 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in the FileSession object in Mod_python module 3.2.7 for Apache allows local users to execute arbitrary code via a crafted session cookie.

Affected products

Apache Mod Python: 3.2.7

References

http://secunia.com/advisories/19239
http://securitytracker.com/id?1015764
http://svn.apache.org/viewcvs.cgi/httpd/mod_python/branches/3.2.x/NEWS?rev=378945
http://www.cgisecurity.com/2006/02/07
http://www.modpython.org/fs_sec_warn.html
http://www.securityfocus.com/bid/16916
http://www.vupen.com/english/advisories/2006/0768
https://exchange.xforce.ibmcloud.com/vulnerabilities/24965
http://secunia.com/advisories/19239
http://securitytracker.com/id?1015764
http://svn.apache.org/viewcvs.cgi/httpd/mod_python/branches/3.2.x/NEWS?rev=378945
http://www.cgisecurity.com/2006/02/07

Get alerted when CVE-2006-1095 or the next vulnerability affects your stack