CVE-2006-1095: Apache Mod Python

High severity, CVSS 7.2. EPSS: 0.9% chance of exploitation in the next 30 days.

Directory traversal vulnerability in the FileSession object in Mod_python module 3.2.7 for Apache allows local users to execute arbitrary code via a crafted session cookie.

Affected products

• Apache Mod Python: version 3.2.7 only

Published 2006-03-09. Last modified 2026-06-16.