956 matches found
CVE-2007-4772
The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service infinite loop via a crafted regular expression...
PT-2008-1457 · Postgresql +3 · Postgresql +3
Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 7.4 through 7.4.18 PostgreSQL versions 8.0 through 8.0.14 PostgreSQL versions 8.1 through 8.1.10 PostgreSQL versions 8.2 through 8.2.5 TCL versions prior to 8.4.17 Description: The issue is related to the regular expressio...
SiteScape Forum dispatch.cgi脚本TCL命令注入漏洞
BUGTRAQ ID: 26963 SiteScape Forum是一款协作解决方案，专用于满足企业、政府和军队中大型和/或分布式团队的通信和程序管理需要。 SiteScape Forum没有正确地处理发送给dispatcher.cgi脚本的某些请求，允许远程攻击者通过提交恶意HTTP请求注入并执行TCL命令。 SiteScape Forum ZX SiteScape Forum ST SiteScape --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
SiteScape Forum 'dispatch.cgi' Tcl命令注入漏洞
BUGTRAQ ID: 26963 CNCAN ID:CNCAN-2007122406 SiteScape Forum是一款基于CGI的WEB应用程序。 SiteScape Forum不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是由于'dispatch.cgi'脚本对用户提交的WEB参数处理缺少充分过滤，提交包含';'元字符作为参数数据，可导致以WEB权限执行TCL代码。 SiteScape Forum ZX SiteScape Forum ST 升级到最新版本：...
CVE-2007-6515
support/dispatch.cgi in SiteScape Forum allows remote attackers to execute arbitrary TCL code via code separator characters in the query string...
Code injection
support/dispatch.cgi in SiteScape Forum allows remote attackers to execute arbitrary TCL code via code separator characters in the query string...
CVE-2007-6515
support/dispatch.cgi in SiteScape Forum allows remote attackers to execute arbitrary TCL code via code separator characters in the query string...
SiteScape Forum TCL injection
Hi, I have following advisory for you. [email protected] SiteScape Forum TCL injection ================================ discovered by [email protected] PRODUCT: SiteScape Forum EXPOSURE: TCL injection SYNOPSIS ======== By URL modification it is possible to insert TCL code into aplication. Accou...
[SECURITY] Fedora 7 Update: eggdrop-1.6.18-12.fc7
Eggdrop is the world's most popular Open Source IRC bot, designed for flexibility and ease of use. It is extendable with Tcl scripts and/or C modules, has support for the big five IRC networks and is able to form botnets, share partylines and userfiles between bots...
Fedora 7 : tk-8.4.13-6.fc7 (2007-2564)
Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk before 8.4.16 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. Note that Tenable Network Security has extracted the preceding...
FreeBSD : tcl/tk -- buffer overflow in ReadImage function (a058d6fa-7325-11dc-ae10-0016179b2dd5)
A Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl/Tk, allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...
Buffer overflow
Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...
CVE-2007-5137
Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...
CVE-2007-5137
Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...
CVE-2007-5137
The CVE-2007-5137 issue affects Tcl/Tk, specifically Tk’s GIF handling in ReadImage() (generic/tkImgGIF.c) for Tcl/Tk 8.4.13–8.4.15. The vulnerability is a buffer overflow triggered by interlaced/animated GIFs where later frames are smaller than the first, potentially enabling remote code executi...
CVE-2007-5137
Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...
CVE-2007-5137
Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...
tcl/tk -- buffer overflow in ReadImage function
A Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl/Tk, allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first...