Secunia

ECL team has reported some vulnerabilities in W-Channel TC-IDE, which can be exploited by malicious, local users to gain escalated privileges.

The problem is that some tools included in TC-IDE does not sanitise the user input and allows injection of arbitrary shell commands. This affects:
* The "Net Tools" dialog.
* The "PPPoE dailer" GUI.
* The "Use specific e-mail client" option in Opera.

Successful exploitation grants a local user "root" privileges.

Solution
The vulnerabilities have reportedly been fixed in version 1.54.

Provided and/or discovered by
ECL team

Deep Links
Links available in Customer Area