CVE-2008-4101 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-4101
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-4101

Description: Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a ";" (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) "Ctrl-]" (control close-square-bracket) or (3) "g]" (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/44626 UBUNTU http://www.ubuntu.com/usn/USN-712-1 SAID Secunia Advisory: SA33410 Secunia Advisory: SA32222 Secunia Advisory: SA31592 REDHAT http://www.redhat.com/support/errata/RHSA-2008-0580.html http://www.redhat.com/support/errata/RHSA-2008-0617.html MLIST http://groups.google.com/group/vim_dev/msg/9290f26f9bc11b33 http://www.openwall.com/lists/oss-security/2008/09/16/5 http://www.openwall.com/lists/oss-security/2008/09/16/6 http://ftp.vim.org/pub/vim/patches/7.2/7.2.010 http://www.openwall.com/lists/oss-security/2008/09/11/3 http://www.openwall.com/lists/oss-security/2008/09/11/4 MISC http://groups.google.com/group/vim_dev/attach/dd32ad3a84f36bb2/K-arbitrary-command-execution.patch?part=2 http://groups.google.com/group/vim_dev/browse_thread/thread/1434d0812b5c817e/6ad2d5b50a96668e http://www.rdancer.org/vulnerablevim-K.html http://groups.google.com/group/vim_dev/attach/9290f26f9bc11b33/K-arbitrary-command-execution.patch.v3?part=2 MANDRIVA http://www.mandriva.com/security/advisories?name=MDVSA-2008:236 CONFIRM http://support.apple.com/kb/HT3216 http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm http://www.vmware.com/security/advisories/VMSA-2009-0004.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/502322/100/0/threaded http://www.securityfocus.com/archive/1/495703 http://www.securityfocus.com/archive/1/495662 BID 30795 31681 APPLE http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

Return to the previous page.