tcl/tk package (tcltk) 8.3.1 searches for its libraries in the current working directory before other directories, which could allow local users to execute arbitrary code via a Trojan horse library that is under a user-controlled directory.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Linux | Conectiva | 6.0 (including) | 6.0 (including) |
| Linux | Conectiva | 7.0 (including) | 7.0 (including) |