Secunia CSI 5.0
Products
Solutions
Customers
Partner
Resources
Company
Careers
Community

CVE Reference: CVE-2008-4101
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2008-4101

Description:
Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a ";" (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) "Ctrl-]" (control close-square-bracket) or (3) "g]" (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/44626

UBUNTU
  http://www.ubuntu.com/usn/USN-712-1

SAID
  Secunia Advisory: SA31592
  Secunia Advisory: SA32222
  Secunia Advisory: SA33410

REDHAT
  http://www.redhat.com/support/errata/RHSA-2008-0580.html
  http://www.redhat.com/support/errata/RHSA-2008-0617.html

OVAL
  http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5812
  http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10894

MLIST
  http://ftp.vim.org/pub/vim/patches/7.2/7.2.010
  http://groups.google.com/group/vim_dev/msg/9290f26f9bc11b33
  http://www.openwall.com/lists/oss-security/2008/09/16/6
  http://www.openwall.com/lists/oss-security/2008/09/16/5
  http://www.openwall.com/lists/oss-security/2008/09/11/4
  http://www.openwall.com/lists/oss-security/2008/09/11/3

MISC
  http://groups.google.com/group/vim_dev/attach/9290f26f9bc11b33/K-arbitrary-command-execution.patch.v3?part=2
  http://groups.google.com/group/vim_dev/attach/dd32ad3a84f36bb2/K-arbitrary-command-execution.patch?part=2
  http://groups.google.com/group/vim_dev/browse_thread/thread/1434d0812b5c817e/6ad2d5b50a96668e
  http://www.rdancer.org/vulnerablevim-K.html

MANDRIVA
  http://www.mandriva.com/security/advisories?name=MDVSA-2008:236

CONFIRM
  http://support.apple.com/kb/HT4077
  http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm
  http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm
  http://support.apple.com/kb/HT3216
  http://www.vmware.com/security/advisories/VMSA-2009-0004.html

BUGTRAQ
  http://www.securityfocus.com/archive/1/archive/1/502322/100/0/threaded
  http://www.securityfocus.com/archive/1/495703
  http://www.securityfocus.com/archive/1/495662

BID
  31681
  30795

APPLE
  http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html
  http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html


Return to the previous page.


 Products Solutions Customers Partner Resources Company
 
 Corporate
Vulnerability Intelligence Manager (VIM)
Corporate Software Inspector (CSI)
Consumer
Personal Software Inspector (PSI)
Online Software Inspector (OSI)
 Industry
Compliance
Technology
Integration
 Customers
Testimonials
 VARS
MSSP
Technology Partners
References
 Factsheets
Reports & Papers
Webinars
Events
 About us
Careers
Memberships
Newsroom
 
© 2002-2012 Secunia ApS - Rued Langgaards Vej 8, 4th floor, DK-2300 Copenhagen, Denmark - +45 7020 5144
Terms & Conditions and Copyright - Privacy - Report Vulnerability