1088 matches found
tcl/tk -- buffer overflow in ReadImage function
A Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl/Tk, allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first...
Buffer overflow
Buffer overflow in tcl/win/tclWinReg.c in Tcl Tcl/Tk before 8.5a6 allows local users to gain privileges via long registry key paths...
CVE-2007-2877
Buffer overflow in tcl/win/tclWinReg.c in Tcl Tcl/Tk before 8.5a6 allows local users to gain privileges via long registry key paths...
CVE-2007-2877
Buffer overflow in tcl/win/tclWinReg.c in Tcl Tcl/Tk before 8.5a6 allows local users to gain privileges via long registry key paths...
CVE-2007-2877
CVE-2007-2877 affects Tcl/Tk before 8.5a6. A buffer overflow in Tcl/Tk components (e.g., tclWinReg.c) can be exploited to gain privileges (local escalation) via crafted input (long registry key paths). A patch is to upgrade to 8.5a6 or later; the precise vulnerable component/filename varies by do...
CVE-2007-2877: Undefined Security Weakness
Buffer overflow in tcl/win/tclWinReg.c in Tcl Tcl/Tk before 8.5a6 allows local users to gain privileges via long registry key paths...
PT-2007-4179 · Tcl +1 · Tcltk +1
Name of the Vulnerable Software and Affected Versions: Tcl/Tk versions prior to 8.5a6 Description: A buffer overflow issue exists, allowing local users to gain privileges through long registry key paths. Recommendations: For versions prior to 8.5a6, update to version 8.5a6 or later to resolve the...
MDKA-2006:050 : ical
The Ical package in Mandriva Linux 2007 fails to run due to old code that does not work with current versions of TCL. Additionally, the application did not appear in the menu and the URL was obsolete. This updated package fixes these issues. %NASLMINLEVEL 999999 @DEPRECATED@ This script has been...
CVE-2005-4784
Multiple buffer overflows in the POSIX readdirr function, as used in multiple packages, allow local users to cause a denial of service and possibly execute arbitrary code via 1 a symlink attack that exploits a race condition between opendir and pathcon calls and changes the filesystem to one with...
Authorization
The TCL shell in Cisco IOS 12.214S before 12.214S16, 12.218S before 12.218S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting AAA command authorization checks, which may allow local users to execute IOS EXEC commands that were...
Authorization
Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and 12.4 based trains reuse a Tcl Shell process across login sessions of different local users on the same terminal if the first user does not use tclquit before exiting, which may...
CVE-2006-0486
Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and 12.4 based trains reuse a Tcl Shell process across login sessions of different local users on the same terminal if the first user does not use tclquit before exiting, which may...
CVE-2006-0485
The TCL shell in Cisco IOS 12.214S before 12.214S16, 12.218S before 12.218S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting AAA command authorization checks, which may allow local users to execute IOS EXEC commands that were...
CVE-2006-0485
CVE-2006-0485 affects Cisco IOS TCL/CLI: the TCL shell does not perform AAA command authorization checks, potentially allowing local users to bypass AAA and execute IOS EXEC commands prohibited by configuration (Bug CSCeh73049). Affected Cisco IOS versions include 12.2(14)S before 12.2(14)S16 and...
CVE-2006-0486
CVE-2006-0486 affects Cisco IOS releases, specifically 12.2S trains (MR 25+), 12.3T, and 12.4, where a Tcl Shell process can be reused across login sessions for different local users if tclquit isn’t issued. This could allow subsequent users to run unintended commands or bypass AAA checks. The is...
CVE-2006-0485
The TCL shell in Cisco IOS 12.214S before 12.214S16, 12.218S before 12.218S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting AAA command authorization checks, which may allow local users to execute IOS EXEC commands that were...
CVE-2006-0486: Undefined Security Weakness
Certain Cisco IOS releases in 12.2S based trains with maintenance release number 25 and later, 12.3T based trains, and 12.4 based trains reuse a Tcl Shell process across login sessions of different local users on the same terminal if the first user does not use tclquit before exiting, which may...
CVE-2006-0485: Undefined Security Weakness
The TCL shell in Cisco IOS 12.214S before 12.214S16, 12.218S before 12.218S11, and certain other releases before 25 January 2006 does not perform Authentication, Authorization, and Accounting AAA command authorization checks, which may allow local users to execute IOS EXEC commands that were...
[SA18613] Cisco IOS AAA Command Authentication Bypass Vulnerability
TITLE: Cisco IOS AAA Command Authentication Bypass Vulnerability SECUNIA ADVISORY ID: SA18613 VERIFY ADVISORY: http://secunia.com/advisories/18613/ CRITICAL: Less critical IMPACT: Security Bypass WHERE: Local system OPERATING SYSTEM: Cisco IOS R12.x http://secunia.com/product/50/ Cisco IOS 12.x...