GEN:SID 1:1352
Message WEB-ATTACKS tclsh execution attempt
Summary Attempted tclsh command access via web
Impact Attempt to gain information on system processes on webserver
Detailed Information This is an attempt to execute a tclsh command or script on a webserver. tclsh is a shell application that reads tcl commands and evaluates them. The attacker could possibly execute a command or script on the host.
Affected Systems  
Attack Scenarios The attacker can make a standard HTTP request that contains 'tclsh'in the URI.
Ease of Attack Simple HTTP request.
Corrective Action Webservers should not be allowed to view or execute files and binaries outside of it's designated web root or cgi-bin. This command may also be requested on a command line should the attacker gain access to the machine.
Additional References sid: 1351