CVE-2007-6067

CVE-2007-6067 is an algorithmic complexity vulnerability in the TCL regular expression parser up to version 8.4.17, used by PostgreSQL 8.2/8.1/8.0/7.4 series. A crafted complex regex with doubly-nested states can be used by remote authenticated users to cause a denial of service via memory consum...

CVE-2007-4772

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service infinite loop via a crafted regular expression...

CVE-2007-4772

CVE-2007-4772 concerns the Tcl (Tool Command Language) regular expression parser. The affected code path is TCL before 8.4.17, which, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of servic...

CVE-2007-4769

Vulnerability summary (CVE-2007-4769) The Tcl regular expression parser used by PostgreSQL versions affected by TCL TclRegex before 8.4.17 contains an out-of-bounds backref error that can be triggered by an authenticated remote user, leading to a backend crash (DoS). Impacted versions (per descri...

PT-2008-1536 · Postgresql +3 · Postgresql +3

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions prior to 8.2.6 PostgreSQL versions prior to 8.1.11 PostgreSQL versions prior to 8.0.15 PostgreSQL versions prior to 7.4.19 TCL versions prior to 8.4.17 Description: The issue allows remote authenticated users to cause a...

CVE-2007-4772

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows context-dependent attackers to cause a denial of service infinite loop via a crafted regular expression...

PT-2008-1457 · Postgresql +3 · Postgresql +3

Name of the Vulnerable Software and Affected Versions: PostgreSQL versions 7.4 through 7.4.18 PostgreSQL versions 8.0 through 8.0.14 PostgreSQL versions 8.1 through 8.1.10 PostgreSQL versions 8.2 through 8.2.5 TCL versions prior to 8.4.17 Description: The issue is related to the regular expressio...

SiteScape Forum dispatch.cgi脚本TCL命令注入漏洞

BUGTRAQ ID: 26963 SiteScape Forum是一款协作解决方案，专用于满足企业、政府和军队中大型和/或分布式团队的通信和程序管理需要。 SiteScape Forum没有正确地处理发送给dispatcher.cgi脚本的某些请求，允许远程攻击者通过提交恶意HTTP请求注入并执行TCL命令。 SiteScape Forum ZX SiteScape Forum ST SiteScape --------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

SiteScape Forum 'dispatch.cgi' Tcl命令注入漏洞

BUGTRAQ ID: 26963 CNCAN ID:CNCAN-2007122406 SiteScape Forum是一款基于CGI的WEB应用程序。 SiteScape Forum不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是由于'dispatch.cgi'脚本对用户提交的WEB参数处理缺少充分过滤，提交包含';'元字符作为参数数据，可导致以WEB权限执行TCL代码。 SiteScape Forum ZX SiteScape Forum ST 升级到最新版本：...

Code injection

support/dispatch.cgi in SiteScape Forum allows remote attackers to execute arbitrary TCL code via code separator characters in the query string...

CVE-2007-6515

support/dispatch.cgi in SiteScape Forum allows remote attackers to execute arbitrary TCL code via code separator characters in the query string...

CVE-2007-6515

support/dispatch.cgi in SiteScape Forum allows remote attackers to execute arbitrary TCL code via code separator characters in the query string...

SiteScape Forum TCL injection

Hi, I have following advisory for you. [email protected] SiteScape Forum TCL injection ================================ discovered by [email protected] PRODUCT: SiteScape Forum EXPOSURE: TCL injection SYNOPSIS ======== By URL modification it is possible to insert TCL code into aplication. Accou...

[SECURITY] Fedora 7 Update: eggdrop-1.6.18-12.fc7

Eggdrop is the world's most popular Open Source IRC bot, designed for flexibility and ease of use. It is extendable with Tcl scripts and/or C modules, has support for the big five IRC networks and is able to form botnets, share partylines and userfiles between bots...

Fedora 7 : tk-8.4.13-6.fc7 (2007-2564)

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk before 8.4.16 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. Note that Tenable Network Security has extracted the preceding...

FreeBSD : tcl/tk -- buffer overflow in ReadImage function (a058d6fa-7325-11dc-ae10-0016179b2dd5)

A Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl/Tk, allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and packa...

Buffer overflow

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...

CVE-2007-5137

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...

CVE-2007-5137

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...

CVE-2007-5137

Buffer overflow in the ReadImage function in generic/tkImgGIF.c in Tcl Tcl/Tk 8.4.13 through 8.4.15 allows remote attackers to execute arbitrary code via multi-frame interlaced GIF files in which later frames are smaller than the first. NOTE: this issue is due to an incorrect patch for...