CVE-2006-1095

Directory traversal vulnerability in the FileSession object in Mod_python module 3.2.7 for Apache...

7.2 High

CVE-2006-1095 is a high vulnerability (CVSS 7.2) in Apache Mod Python, published March 9, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.89%, the 59th percentile. No source names a fixed version.

What does this mean?

Severity: 7.2 HighCVSS 2.0, NVD
Exploit chance: 0.89%EPSS, 59th percentile
Exploitation: None knownNot on CISA’s or ENISA’s lists
Fixed in: No fix listedNo source names one

Description

Directory traversal vulnerability in the FileSession object in Mod_python module 3.2.7 for Apache allows local users to execute arbitrary code via a crafted session cookie.

Exploit likelihood

0.89%Down 1.0 points since Feb 4, 2022

Affected products

apache mod python

What each source reports

NVD Score used7.2

Directory traversal vulnerability in the FileSession object in Mod_python module 3.2.7 for Apache allows local users to execute arbitrary code via a crafted session cookie.

Record: CVE-2006-1095
CVSS 2.0: 7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness: CWE-22
Updated: 2026-11-02

CVE ListNo score

Directory traversal vulnerability in the FileSession object in Mod_python module 3.2.7 for Apache allows local users to execute arbitrary code via a crafted session cookie.

Record: CVE-2006-1095
Updated: 2026-11-02

EUVDEUVD-2006-1099No score

Directory traversal vulnerability in the FileSession object in Mod_python module 3.2.7 for Apache allows local users to execute arbitrary code via a crafted session cookie.

Record: EUVD-2006-1099
Updated: 2026-11-03

GitHub AdvisoriesGHSA-wh8r-wrrv-8p2rNo score

Directory traversal vulnerability in the FileSession object in Mod_python module 3.2.7 for Apache...

Directory traversal vulnerability in the FileSession object in Mod_python module 3.2.7 for Apache allows local users to execute arbitrary code via a crafted session cookie.

Record: GHSA-wh8r-wrrv-8p2r
Weakness: CWE-22
Updated: 2026-11-02

History

History
Recorded	Changed	Sources
Nov 10, 2026	facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

References

Show 4 moreShow less