CVE-2023-45239

The CVE-2023-45239 entry concerns tac_plus, a TACACS+ daemon. A lack of input validation prior to commit 4fdf178 allows an attacker who can control the username, rem-addr, or NAC address sent to tac_plus to inject shell commands when pre- or post-authorization commands are enabled, enabling remot...