|
OpenLinux update for vim
|
|
Secunia Advisory:
|
SA11248
|
|
|
Release Date:
|
2004-03-31
|
|
Popularity:
|
7,992 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | OpenLinux Server 3.x
OpenLinux Workstation 3.x
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
SCO has issued updated packages for vim. These fix an older vulnerability, which potentially can be exploited by malicious people to compromise a user's system.
It is possible to create malicious text files that can execute arbitrary commands when loaded into vim. The problem is that vim parses the text file and looks for comments, which can be exploited to call external commands.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
