CVE-2008-4047

Unspecified vulnerability in Novell Forum formerly SiteScape Forum 7.0, 7.1, 7.2, 7.3, and 8.0 allows remote attackers to execute arbitrary TCL code via a modified URL. NOTE: this might overlap CVE-2007-6515...

CVE-2008-4047

CVE-2008-4047 affects Novell Forum (SiteScape Forum) versions 7.0–8.0. It enables remote attackers to execute arbitrary TCL code by supplying a modified URL, as described in the CVE entry (note possible overlap with CVE-2007-6515). The provided documents confirm the existence of a TCL injection v...

CVE-2008-4047: Improper Control of Generation of Code

Unspecified vulnerability in Novell Forum formerly SiteScape Forum 7.0, 7.1, 7.2, 7.3, and 8.0 allows remote attackers to execute arbitrary TCL code via a modified URL. NOTE: this might overlap CVE-2007-6515...

FreeBSD Ports: tcl, tcl-threads

The remote host is missing an update to the system as announced in the referenced advisory. VID a058d6fa-7325-11dc-ae10-0016179b2dd5 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: tcl, tcl-threads

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

TCL/TK Tk工具包ReadImage()函数GIF文件解析栈溢出漏洞

BUGTRAQ ID: 27655 CVECAN ID: CVE-2008-0553 Tcl是一种简明，高效，可移植的编程语言。 在Tcl的Tk工具包中，tkImgGIF.c文件的ReadImage函数没有正确地验证从GIF图形中所读取的initialCodeSize值。如果用户受骗打开了恶意的GIF图形文件的话，就可能触发栈溢出，导致执行任意指令。 John Ousterhout Tcl 8.5.1 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1491-1）以及相应补丁: DSA-1491-1：New tk8.4 packages fix...

CentOS 5 : tk (CESA-2008:0136)

Updated tk packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Tk is a graphical toolkit for the Tcl scripting language. An input validation flaw was discovered in...

CentOS 3 : tcltk (CESA-2008:0134)

Updated tcltk packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Tcl is a scripting language designed for embedding into other applications and for use...

RHEL 2.1 / 3 : tcltk (RHSA-2008:0134)

Updated tcltk packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Tcl is a scripting language designed for embedding into other applications and for use...

tk security update

CentOS Errata and Security Advisory CESA-2008:0136 Updated tk packages that fix a security issue are now available for Red Hat Enterprise Linux 4. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Updated 22 February 2008 The packages in this...

expect, itcl, tcl, tcllib, tclx, tix, tk security update

CentOS Errata and Security Advisory CESA-2008:0134-01 Updated tcltk packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Tcl is a scripting language design...

expect, expectk, itcl, tcl, tcllib, tclx, tix, tk security update

CentOS Errata and Security Advisory CESA-2008:0134 Updated tcltk packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Tcl is a scripting language designed...

Moderate: Red Hat Security Advisory: tcltk security update

Updated tcltk packages that fix a security issue are now available for Red Hat Enterprise Linux 2.1, and 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Tcl is a scripting language designed for embedding into other applications and for use...

[SECURITY] Fedora 7 Update: tk-8.4.13-7.fc7

When paired with the Tcl scripting language, Tk provides a fast and powerful way to create cross-platform GUI applications...

[SECURITY] Fedora 8 Update: perl-Tk-804.028-3.fc8

This a re-port of a perl interface to Tk8.4. C code is derived from Tcl/Tk8.4.5. It also includes all the C code parts of Tix8.1.4 from SourceForge. The perl code corresponding to Tix's Tcl code is not fully implemented. Perl API is essentially the same as Tk800 series Tk800.025 but has not been...

CVE-2008-0553

Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk Tcl/Tk before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484...

CVE-2008-0553

The CVE-2008-0553 issue is a stack-based buffer overflow in Tk’s GIF image handling (ReadImage in tkImgGIF.c) in Tcl/Tk prior to 8.5.1, which could allow remote code execution via a crafted GIF. Impact is partial confidentiality/integrity/availability; exploitation could be remote over the networ...

CVE-2008-0553: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the ReadImage function in tkImgGIF.c in Tk Tcl/Tk before 8.5.1 allows remote attackers to execute arbitrary code via a crafted GIF image, a similar issue to CVE-2006-4484...

postgresql integer overflow in regex code

The regular expression parser in TCL before 8.4.17, as used in PostgreSQL 8.2 before 8.2.6, 8.1 before 8.1.11, 8.0 before 8.0.15, and 7.4 before 7.4.19, allows remote authenticated users to cause a denial of service backend crash via an out-of-bounds backref number...

Ubuntu 6.06 LTS / 6.10 / 7.04 / 7.10 : postgresql vulnerabilities (USN-568-1)

Nico Leidecker discovered that PostgreSQL did not properly restrict dblink functions. An authenticated user could exploit this flaw to access arbitrary accounts and execute arbitrary SQL queries. CVE-2007-3278, CVE-2007-6601 It was discovered that the TCL regular expression parser used by...