csaf_redhat - rhsa-2008

rhsa-2008_0618

Vulnerability from csaf_redhat

Published

2008-11-25 09:00

Modified

2024-11-22 02:08

Summary

Red Hat Security Advisory: vim security update

Notes

Topic

Updated vim packages that fix security issues are now available for Red Hat Enterprise Linux 2.1. This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Details

Vim (Visual editor IMproved) is an updated and improved version of the vi editor. Several input sanitization flaws were found in Vim's keyword and tag handling. If Vim looked up a document's maliciously crafted tag or keyword, it was possible to execute arbitrary code as the user running Vim. (CVE-2008-4101) Several input sanitization flaws were found in various Vim system functions. If a user opened a specially crafted file, it was possible to execute arbitrary code as the user running Vim. (CVE-2008-2712) All Vim users are advised to upgrade to these updated packages, which contain backported patches to correct these issues.

This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://access.redhat.com/security/updates/classification/",
      "text": "Moderate"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Updated vim packages that fix security issues are now available for Red Hat\nEnterprise Linux 2.1.\n\nThis update has been rated as having moderate security impact by the Red Hat\nSecurity Response Team.",
        "title": "Topic"
      },
      {
        "category": "general",
        "text": "Vim (Visual editor IMproved) is an updated and improved version of the vi\neditor.\n\nSeveral input sanitization flaws were found in Vim\u0027s keyword and tag\nhandling. If Vim looked up a document\u0027s maliciously crafted tag or keyword,\nit was possible to execute arbitrary code as the user running Vim.\n(CVE-2008-4101)\n\nSeveral input sanitization flaws were found in various Vim system\nfunctions. If a user opened a specially crafted file, it was possible to\nexecute arbitrary code as the user running Vim. (CVE-2008-2712)\n\nAll Vim users are advised to upgrade to these updated packages, which\ncontain backported patches to correct these issues.",
        "title": "Details"
      },
      {
        "category": "legal_disclaimer",
        "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
        "title": "Terms of Use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://access.redhat.com/security/team/contact/",
      "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
      "name": "Red Hat Product Security",
      "namespace": "https://www.redhat.com"
    },
    "references": [
      {
        "category": "self",
        "summary": "https://access.redhat.com/errata/RHSA-2008:0618",
        "url": "https://access.redhat.com/errata/RHSA-2008:0618"
      },
      {
        "category": "external",
        "summary": "https://access.redhat.com/security/updates/classification/#moderate",
        "url": "https://access.redhat.com/security/updates/classification/#moderate"
      },
      {
        "category": "external",
        "summary": "451759",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=451759"
      },
      {
        "category": "external",
        "summary": "461927",
        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=461927"
      },
      {
        "category": "self",
        "summary": "Canonical URL",
        "url": "https://security.access.redhat.com/data/csaf/v2/advisories/2008/rhsa-2008_0618.json"
      }
    ],
    "title": "Red Hat Security Advisory: vim security update",
    "tracking": {
      "current_release_date": "2024-11-22T02:08:13+00:00",
      "generator": {
        "date": "2024-11-22T02:08:13+00:00",
        "engine": {
          "name": "Red Hat SDEngine",
          "version": "4.2.1"
        }
      },
      "id": "RHSA-2008:0618",
      "initial_release_date": "2008-11-25T09:00:00+00:00",
      "revision_history": [
        {
          "date": "2008-11-25T09:00:00+00:00",
          "number": "1",
          "summary": "Initial version"
        },
        {
          "date": "2008-11-25T04:00:16+00:00",
          "number": "2",
          "summary": "Last updated version"
        },
        {
          "date": "2024-11-22T02:08:13+00:00",
          "number": "3",
          "summary": "Last generated version"
        }
      ],
      "status": "final",
      "version": "3"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                "product": {
                  "name": "Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
                  "product_id": "2.1AS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::as"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Linux Advanced Workstation 2.1",
                "product": {
                  "name": "Red Hat Linux Advanced Workstation 2.1",
                  "product_id": "2.1AW",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::aw"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux ES version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux ES version 2.1",
                  "product_id": "2.1ES",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::es"
                  }
                }
              },
              {
                "category": "product_name",
                "name": "Red Hat Enterprise Linux WS version 2.1",
                "product": {
                  "name": "Red Hat Enterprise Linux WS version 2.1",
                  "product_id": "2.1WS",
                  "product_identification_helper": {
                    "cpe": "cpe:/o:redhat:enterprise_linux:2.1::ws"
                  }
                }
              }
            ],
            "category": "product_family",
            "name": "Red Hat Enterprise Linux"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vim-X11-1:6.0-7.25.ia64",
                "product": {
                  "name": "vim-X11-1:6.0-7.25.ia64",
                  "product_id": "vim-X11-1:6.0-7.25.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-X11@6.0-7.25?arch=ia64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-common-1:6.0-7.25.ia64",
                "product": {
                  "name": "vim-common-1:6.0-7.25.ia64",
                  "product_id": "vim-common-1:6.0-7.25.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-common@6.0-7.25?arch=ia64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-minimal-1:6.0-7.25.ia64",
                "product": {
                  "name": "vim-minimal-1:6.0-7.25.ia64",
                  "product_id": "vim-minimal-1:6.0-7.25.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-minimal@6.0-7.25?arch=ia64\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-enhanced-1:6.0-7.25.ia64",
                "product": {
                  "name": "vim-enhanced-1:6.0-7.25.ia64",
                  "product_id": "vim-enhanced-1:6.0-7.25.ia64",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-enhanced@6.0-7.25?arch=ia64\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "ia64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vim-1:6.0-7.25.src",
                "product": {
                  "name": "vim-1:6.0-7.25.src",
                  "product_id": "vim-1:6.0-7.25.src",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim@6.0-7.25?arch=src\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "src"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "vim-X11-1:6.0-7.25.i386",
                "product": {
                  "name": "vim-X11-1:6.0-7.25.i386",
                  "product_id": "vim-X11-1:6.0-7.25.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-X11@6.0-7.25?arch=i386\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-common-1:6.0-7.25.i386",
                "product": {
                  "name": "vim-common-1:6.0-7.25.i386",
                  "product_id": "vim-common-1:6.0-7.25.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-common@6.0-7.25?arch=i386\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-minimal-1:6.0-7.25.i386",
                "product": {
                  "name": "vim-minimal-1:6.0-7.25.i386",
                  "product_id": "vim-minimal-1:6.0-7.25.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-minimal@6.0-7.25?arch=i386\u0026epoch=1"
                  }
                }
              },
              {
                "category": "product_version",
                "name": "vim-enhanced-1:6.0-7.25.i386",
                "product": {
                  "name": "vim-enhanced-1:6.0-7.25.i386",
                  "product_id": "vim-enhanced-1:6.0-7.25.i386",
                  "product_identification_helper": {
                    "purl": "pkg:rpm/redhat/vim-enhanced@6.0-7.25?arch=i386\u0026epoch=1"
                  }
                }
              }
            ],
            "category": "architecture",
            "name": "i386"
          }
        ],
        "category": "vendor",
        "name": "Red Hat"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-1:6.0-7.25.src as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:vim-1:6.0-7.25.src"
        },
        "product_reference": "vim-1:6.0-7.25.src",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-1:6.0-7.25.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:vim-X11-1:6.0-7.25.i386"
        },
        "product_reference": "vim-X11-1:6.0-7.25.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-1:6.0-7.25.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:vim-X11-1:6.0-7.25.ia64"
        },
        "product_reference": "vim-X11-1:6.0-7.25.ia64",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-1:6.0-7.25.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:vim-common-1:6.0-7.25.i386"
        },
        "product_reference": "vim-common-1:6.0-7.25.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-1:6.0-7.25.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:vim-common-1:6.0-7.25.ia64"
        },
        "product_reference": "vim-common-1:6.0-7.25.ia64",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-1:6.0-7.25.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:vim-enhanced-1:6.0-7.25.i386"
        },
        "product_reference": "vim-enhanced-1:6.0-7.25.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-1:6.0-7.25.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:vim-enhanced-1:6.0-7.25.ia64"
        },
        "product_reference": "vim-enhanced-1:6.0-7.25.ia64",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-1:6.0-7.25.i386 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:vim-minimal-1:6.0-7.25.i386"
        },
        "product_reference": "vim-minimal-1:6.0-7.25.i386",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-1:6.0-7.25.ia64 as a component of Red Hat Enterprise Linux AS (Advanced Server) version 2.1 ",
          "product_id": "2.1AS:vim-minimal-1:6.0-7.25.ia64"
        },
        "product_reference": "vim-minimal-1:6.0-7.25.ia64",
        "relates_to_product_reference": "2.1AS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-1:6.0-7.25.src as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:vim-1:6.0-7.25.src"
        },
        "product_reference": "vim-1:6.0-7.25.src",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-1:6.0-7.25.i386 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:vim-X11-1:6.0-7.25.i386"
        },
        "product_reference": "vim-X11-1:6.0-7.25.i386",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-1:6.0-7.25.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:vim-X11-1:6.0-7.25.ia64"
        },
        "product_reference": "vim-X11-1:6.0-7.25.ia64",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-1:6.0-7.25.i386 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:vim-common-1:6.0-7.25.i386"
        },
        "product_reference": "vim-common-1:6.0-7.25.i386",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-1:6.0-7.25.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:vim-common-1:6.0-7.25.ia64"
        },
        "product_reference": "vim-common-1:6.0-7.25.ia64",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-1:6.0-7.25.i386 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:vim-enhanced-1:6.0-7.25.i386"
        },
        "product_reference": "vim-enhanced-1:6.0-7.25.i386",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-1:6.0-7.25.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:vim-enhanced-1:6.0-7.25.ia64"
        },
        "product_reference": "vim-enhanced-1:6.0-7.25.ia64",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-1:6.0-7.25.i386 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:vim-minimal-1:6.0-7.25.i386"
        },
        "product_reference": "vim-minimal-1:6.0-7.25.i386",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-1:6.0-7.25.ia64 as a component of Red Hat Linux Advanced Workstation 2.1",
          "product_id": "2.1AW:vim-minimal-1:6.0-7.25.ia64"
        },
        "product_reference": "vim-minimal-1:6.0-7.25.ia64",
        "relates_to_product_reference": "2.1AW"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-1:6.0-7.25.src as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:vim-1:6.0-7.25.src"
        },
        "product_reference": "vim-1:6.0-7.25.src",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-1:6.0-7.25.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:vim-X11-1:6.0-7.25.i386"
        },
        "product_reference": "vim-X11-1:6.0-7.25.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-1:6.0-7.25.ia64 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:vim-X11-1:6.0-7.25.ia64"
        },
        "product_reference": "vim-X11-1:6.0-7.25.ia64",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-1:6.0-7.25.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:vim-common-1:6.0-7.25.i386"
        },
        "product_reference": "vim-common-1:6.0-7.25.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-1:6.0-7.25.ia64 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:vim-common-1:6.0-7.25.ia64"
        },
        "product_reference": "vim-common-1:6.0-7.25.ia64",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-1:6.0-7.25.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:vim-enhanced-1:6.0-7.25.i386"
        },
        "product_reference": "vim-enhanced-1:6.0-7.25.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-1:6.0-7.25.ia64 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:vim-enhanced-1:6.0-7.25.ia64"
        },
        "product_reference": "vim-enhanced-1:6.0-7.25.ia64",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-1:6.0-7.25.i386 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:vim-minimal-1:6.0-7.25.i386"
        },
        "product_reference": "vim-minimal-1:6.0-7.25.i386",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-1:6.0-7.25.ia64 as a component of Red Hat Enterprise Linux ES version 2.1",
          "product_id": "2.1ES:vim-minimal-1:6.0-7.25.ia64"
        },
        "product_reference": "vim-minimal-1:6.0-7.25.ia64",
        "relates_to_product_reference": "2.1ES"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-1:6.0-7.25.src as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:vim-1:6.0-7.25.src"
        },
        "product_reference": "vim-1:6.0-7.25.src",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-1:6.0-7.25.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:vim-X11-1:6.0-7.25.i386"
        },
        "product_reference": "vim-X11-1:6.0-7.25.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-X11-1:6.0-7.25.ia64 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:vim-X11-1:6.0-7.25.ia64"
        },
        "product_reference": "vim-X11-1:6.0-7.25.ia64",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-1:6.0-7.25.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:vim-common-1:6.0-7.25.i386"
        },
        "product_reference": "vim-common-1:6.0-7.25.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-common-1:6.0-7.25.ia64 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:vim-common-1:6.0-7.25.ia64"
        },
        "product_reference": "vim-common-1:6.0-7.25.ia64",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-1:6.0-7.25.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:vim-enhanced-1:6.0-7.25.i386"
        },
        "product_reference": "vim-enhanced-1:6.0-7.25.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-enhanced-1:6.0-7.25.ia64 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:vim-enhanced-1:6.0-7.25.ia64"
        },
        "product_reference": "vim-enhanced-1:6.0-7.25.ia64",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-1:6.0-7.25.i386 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:vim-minimal-1:6.0-7.25.i386"
        },
        "product_reference": "vim-minimal-1:6.0-7.25.i386",
        "relates_to_product_reference": "2.1WS"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "vim-minimal-1:6.0-7.25.ia64 as a component of Red Hat Enterprise Linux WS version 2.1",
          "product_id": "2.1WS:vim-minimal-1:6.0-7.25.ia64"
        },
        "product_reference": "vim-minimal-1:6.0-7.25.ia64",
        "relates_to_product_reference": "2.1WS"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2008-2712",
      "discovery_date": "2008-06-15T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "451759"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using (1) filetype.vim, (3) xpm.vim, (4) gzip_vim, and (5) netrw.  NOTE: the originally reported version was 7.1.314, but the researcher actually found this set of issues in 7.1.298.  NOTE: the zipplugin issue (originally vector 2 in this identifier) has been subsumed by CVE-2008-3075.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: command execution via scripts not sanitizing inputs to execute and system",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:vim-1:6.0-7.25.src",
          "2.1AS:vim-X11-1:6.0-7.25.i386",
          "2.1AS:vim-X11-1:6.0-7.25.ia64",
          "2.1AS:vim-common-1:6.0-7.25.i386",
          "2.1AS:vim-common-1:6.0-7.25.ia64",
          "2.1AS:vim-enhanced-1:6.0-7.25.i386",
          "2.1AS:vim-enhanced-1:6.0-7.25.ia64",
          "2.1AS:vim-minimal-1:6.0-7.25.i386",
          "2.1AS:vim-minimal-1:6.0-7.25.ia64",
          "2.1AW:vim-1:6.0-7.25.src",
          "2.1AW:vim-X11-1:6.0-7.25.i386",
          "2.1AW:vim-X11-1:6.0-7.25.ia64",
          "2.1AW:vim-common-1:6.0-7.25.i386",
          "2.1AW:vim-common-1:6.0-7.25.ia64",
          "2.1AW:vim-enhanced-1:6.0-7.25.i386",
          "2.1AW:vim-enhanced-1:6.0-7.25.ia64",
          "2.1AW:vim-minimal-1:6.0-7.25.i386",
          "2.1AW:vim-minimal-1:6.0-7.25.ia64",
          "2.1ES:vim-1:6.0-7.25.src",
          "2.1ES:vim-X11-1:6.0-7.25.i386",
          "2.1ES:vim-X11-1:6.0-7.25.ia64",
          "2.1ES:vim-common-1:6.0-7.25.i386",
          "2.1ES:vim-common-1:6.0-7.25.ia64",
          "2.1ES:vim-enhanced-1:6.0-7.25.i386",
          "2.1ES:vim-enhanced-1:6.0-7.25.ia64",
          "2.1ES:vim-minimal-1:6.0-7.25.i386",
          "2.1ES:vim-minimal-1:6.0-7.25.ia64",
          "2.1WS:vim-1:6.0-7.25.src",
          "2.1WS:vim-X11-1:6.0-7.25.i386",
          "2.1WS:vim-X11-1:6.0-7.25.ia64",
          "2.1WS:vim-common-1:6.0-7.25.i386",
          "2.1WS:vim-common-1:6.0-7.25.ia64",
          "2.1WS:vim-enhanced-1:6.0-7.25.i386",
          "2.1WS:vim-enhanced-1:6.0-7.25.ia64",
          "2.1WS:vim-minimal-1:6.0-7.25.i386",
          "2.1WS:vim-minimal-1:6.0-7.25.ia64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-2712"
        },
        {
          "category": "external",
          "summary": "RHBZ#451759",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=451759"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-2712",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-2712"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-2712",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-2712"
        }
      ],
      "release_date": "2008-06-15T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-11-25T09:00:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "2.1AS:vim-1:6.0-7.25.src",
            "2.1AS:vim-X11-1:6.0-7.25.i386",
            "2.1AS:vim-X11-1:6.0-7.25.ia64",
            "2.1AS:vim-common-1:6.0-7.25.i386",
            "2.1AS:vim-common-1:6.0-7.25.ia64",
            "2.1AS:vim-enhanced-1:6.0-7.25.i386",
            "2.1AS:vim-enhanced-1:6.0-7.25.ia64",
            "2.1AS:vim-minimal-1:6.0-7.25.i386",
            "2.1AS:vim-minimal-1:6.0-7.25.ia64",
            "2.1AW:vim-1:6.0-7.25.src",
            "2.1AW:vim-X11-1:6.0-7.25.i386",
            "2.1AW:vim-X11-1:6.0-7.25.ia64",
            "2.1AW:vim-common-1:6.0-7.25.i386",
            "2.1AW:vim-common-1:6.0-7.25.ia64",
            "2.1AW:vim-enhanced-1:6.0-7.25.i386",
            "2.1AW:vim-enhanced-1:6.0-7.25.ia64",
            "2.1AW:vim-minimal-1:6.0-7.25.i386",
            "2.1AW:vim-minimal-1:6.0-7.25.ia64",
            "2.1ES:vim-1:6.0-7.25.src",
            "2.1ES:vim-X11-1:6.0-7.25.i386",
            "2.1ES:vim-X11-1:6.0-7.25.ia64",
            "2.1ES:vim-common-1:6.0-7.25.i386",
            "2.1ES:vim-common-1:6.0-7.25.ia64",
            "2.1ES:vim-enhanced-1:6.0-7.25.i386",
            "2.1ES:vim-enhanced-1:6.0-7.25.ia64",
            "2.1ES:vim-minimal-1:6.0-7.25.i386",
            "2.1ES:vim-minimal-1:6.0-7.25.ia64",
            "2.1WS:vim-1:6.0-7.25.src",
            "2.1WS:vim-X11-1:6.0-7.25.i386",
            "2.1WS:vim-X11-1:6.0-7.25.ia64",
            "2.1WS:vim-common-1:6.0-7.25.i386",
            "2.1WS:vim-common-1:6.0-7.25.ia64",
            "2.1WS:vim-enhanced-1:6.0-7.25.i386",
            "2.1WS:vim-enhanced-1:6.0-7.25.ia64",
            "2.1WS:vim-minimal-1:6.0-7.25.i386",
            "2.1WS:vim-minimal-1:6.0-7.25.ia64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0618"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vim: command execution via scripts not sanitizing inputs to execute and system"
    },
    {
      "cve": "CVE-2008-4101",
      "discovery_date": "2008-08-20T00:00:00+00:00",
      "ids": [
        {
          "system_name": "Red Hat Bugzilla ID",
          "text": "461927"
        }
      ],
      "notes": [
        {
          "category": "description",
          "text": "Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a \";\" (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) \"Ctrl-]\" (control close-square-bracket) or (3) \"g]\" (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712.",
          "title": "Vulnerability description"
        },
        {
          "category": "summary",
          "text": "vim: arbitrary code execution in commands: K, Control-], g]",
          "title": "Vulnerability summary"
        }
      ],
      "product_status": {
        "fixed": [
          "2.1AS:vim-1:6.0-7.25.src",
          "2.1AS:vim-X11-1:6.0-7.25.i386",
          "2.1AS:vim-X11-1:6.0-7.25.ia64",
          "2.1AS:vim-common-1:6.0-7.25.i386",
          "2.1AS:vim-common-1:6.0-7.25.ia64",
          "2.1AS:vim-enhanced-1:6.0-7.25.i386",
          "2.1AS:vim-enhanced-1:6.0-7.25.ia64",
          "2.1AS:vim-minimal-1:6.0-7.25.i386",
          "2.1AS:vim-minimal-1:6.0-7.25.ia64",
          "2.1AW:vim-1:6.0-7.25.src",
          "2.1AW:vim-X11-1:6.0-7.25.i386",
          "2.1AW:vim-X11-1:6.0-7.25.ia64",
          "2.1AW:vim-common-1:6.0-7.25.i386",
          "2.1AW:vim-common-1:6.0-7.25.ia64",
          "2.1AW:vim-enhanced-1:6.0-7.25.i386",
          "2.1AW:vim-enhanced-1:6.0-7.25.ia64",
          "2.1AW:vim-minimal-1:6.0-7.25.i386",
          "2.1AW:vim-minimal-1:6.0-7.25.ia64",
          "2.1ES:vim-1:6.0-7.25.src",
          "2.1ES:vim-X11-1:6.0-7.25.i386",
          "2.1ES:vim-X11-1:6.0-7.25.ia64",
          "2.1ES:vim-common-1:6.0-7.25.i386",
          "2.1ES:vim-common-1:6.0-7.25.ia64",
          "2.1ES:vim-enhanced-1:6.0-7.25.i386",
          "2.1ES:vim-enhanced-1:6.0-7.25.ia64",
          "2.1ES:vim-minimal-1:6.0-7.25.i386",
          "2.1ES:vim-minimal-1:6.0-7.25.ia64",
          "2.1WS:vim-1:6.0-7.25.src",
          "2.1WS:vim-X11-1:6.0-7.25.i386",
          "2.1WS:vim-X11-1:6.0-7.25.ia64",
          "2.1WS:vim-common-1:6.0-7.25.i386",
          "2.1WS:vim-common-1:6.0-7.25.ia64",
          "2.1WS:vim-enhanced-1:6.0-7.25.i386",
          "2.1WS:vim-enhanced-1:6.0-7.25.ia64",
          "2.1WS:vim-minimal-1:6.0-7.25.i386",
          "2.1WS:vim-minimal-1:6.0-7.25.ia64"
        ]
      },
      "references": [
        {
          "category": "self",
          "summary": "Canonical URL",
          "url": "https://access.redhat.com/security/cve/CVE-2008-4101"
        },
        {
          "category": "external",
          "summary": "RHBZ#461927",
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=461927"
        },
        {
          "category": "external",
          "summary": "https://www.cve.org/CVERecord?id=CVE-2008-4101",
          "url": "https://www.cve.org/CVERecord?id=CVE-2008-4101"
        },
        {
          "category": "external",
          "summary": "https://nvd.nist.gov/vuln/detail/CVE-2008-4101",
          "url": "https://nvd.nist.gov/vuln/detail/CVE-2008-4101"
        }
      ],
      "release_date": "2008-08-22T00:00:00+00:00",
      "remediations": [
        {
          "category": "vendor_fix",
          "date": "2008-11-25T09:00:00+00:00",
          "details": "Before applying this update, make sure that all previously-released\nerrata relevant to your system have been applied.\n\nThis update is available via Red Hat Network.  Details on how to use\nthe Red Hat Network to apply this update are available at\nhttp://kbase.redhat.com/faq/FAQ_58_10188",
          "product_ids": [
            "2.1AS:vim-1:6.0-7.25.src",
            "2.1AS:vim-X11-1:6.0-7.25.i386",
            "2.1AS:vim-X11-1:6.0-7.25.ia64",
            "2.1AS:vim-common-1:6.0-7.25.i386",
            "2.1AS:vim-common-1:6.0-7.25.ia64",
            "2.1AS:vim-enhanced-1:6.0-7.25.i386",
            "2.1AS:vim-enhanced-1:6.0-7.25.ia64",
            "2.1AS:vim-minimal-1:6.0-7.25.i386",
            "2.1AS:vim-minimal-1:6.0-7.25.ia64",
            "2.1AW:vim-1:6.0-7.25.src",
            "2.1AW:vim-X11-1:6.0-7.25.i386",
            "2.1AW:vim-X11-1:6.0-7.25.ia64",
            "2.1AW:vim-common-1:6.0-7.25.i386",
            "2.1AW:vim-common-1:6.0-7.25.ia64",
            "2.1AW:vim-enhanced-1:6.0-7.25.i386",
            "2.1AW:vim-enhanced-1:6.0-7.25.ia64",
            "2.1AW:vim-minimal-1:6.0-7.25.i386",
            "2.1AW:vim-minimal-1:6.0-7.25.ia64",
            "2.1ES:vim-1:6.0-7.25.src",
            "2.1ES:vim-X11-1:6.0-7.25.i386",
            "2.1ES:vim-X11-1:6.0-7.25.ia64",
            "2.1ES:vim-common-1:6.0-7.25.i386",
            "2.1ES:vim-common-1:6.0-7.25.ia64",
            "2.1ES:vim-enhanced-1:6.0-7.25.i386",
            "2.1ES:vim-enhanced-1:6.0-7.25.ia64",
            "2.1ES:vim-minimal-1:6.0-7.25.i386",
            "2.1ES:vim-minimal-1:6.0-7.25.ia64",
            "2.1WS:vim-1:6.0-7.25.src",
            "2.1WS:vim-X11-1:6.0-7.25.i386",
            "2.1WS:vim-X11-1:6.0-7.25.ia64",
            "2.1WS:vim-common-1:6.0-7.25.i386",
            "2.1WS:vim-common-1:6.0-7.25.ia64",
            "2.1WS:vim-enhanced-1:6.0-7.25.i386",
            "2.1WS:vim-enhanced-1:6.0-7.25.ia64",
            "2.1WS:vim-minimal-1:6.0-7.25.i386",
            "2.1WS:vim-minimal-1:6.0-7.25.ia64"
          ],
          "restart_required": {
            "category": "none"
          },
          "url": "https://access.redhat.com/errata/RHSA-2008:0618"
        }
      ],
      "threats": [
        {
          "category": "impact",
          "details": "Moderate"
        }
      ],
      "title": "vim: arbitrary code execution in commands: K, Control-], g]"
    }
  ]
}

cve-2008-2712

Vulnerability from cvelistv5

Published

2008-06-16 21:00

Modified

2024-08-07 09:14

Severity ?

Summary

Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using (1) filetype.vim, (3) xpm.vim, (4) gzip_vim, and (5) netrw. NOTE: the originally reported version was 7.1.314, but the researcher actually found this set of issues in 7.1.298. NOTE: the zipplugin issue (originally vector 2 in this identifier) has been subsumed by CVE-2008-3075.

References

▼	URL	Tags
	http://www.vmware.com/security/advisories/VMSA-2009-0004.html	x_refsource_CONFIRM
	http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html	vendor-advisory, x_refsource_SUSE
	http://www.redhat.com/support/errata/RHSA-2008-0618.html	vendor-advisory, x_refsource_REDHAT
	http://www.rdancer.org/vulnerablevim.html	x_refsource_MISC
	http://www.ubuntu.com/usn/USN-712-1	vendor-advisory, x_refsource_UBUNTU
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6238	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/31681	vdb-entry, x_refsource_BID
	https://exchange.xforce.ibmcloud.com/vulnerabilities/43083	vdb-entry, x_refsource_XF
	http://secunia.com/advisories/32858	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/33410	third-party-advisory, x_refsource_SECUNIA
	http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.redhat.com/support/errata/RHSA-2008-0580.html	vendor-advisory, x_refsource_REDHAT
	http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm	x_refsource_CONFIRM
	http://secunia.com/advisories/34418	third-party-advisory, x_refsource_SECUNIA
	http://www.vupen.com/english/advisories/2009/0904	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2009/0033	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/archive/1/495319/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.securityfocus.com/archive/1/493353/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11109	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/archive/1/502322/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://www.openwall.com/lists/oss-security/2008/06/16/2	mailing-list, x_refsource_MLIST
	http://marc.info/?l=bugtraq&m=121494431426308&w=2	mailing-list, x_refsource_BUGTRAQ
	http://www.vupen.com/english/advisories/2008/1851/references	vdb-entry, x_refsource_VUPEN
	http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm	x_refsource_CONFIRM
	http://secunia.com/advisories/30731	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/32222	third-party-advisory, x_refsource_SECUNIA
	http://support.apple.com/kb/HT4077	x_refsource_CONFIRM
	https://issues.rpath.com/browse/RPL-2622	x_refsource_CONFIRM
	http://securityreason.com/securityalert/3951	third-party-advisory, x_refsource_SREASON
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:236	vendor-advisory, x_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2008/2780	vdb-entry, x_refsource_VUPEN
	http://www.openwall.com/lists/oss-security/2008/10/15/1	mailing-list, x_refsource_MLIST
	http://secunia.com/advisories/32864	third-party-advisory, x_refsource_SECUNIA
	http://www.securitytracker.com/id?1020293	vdb-entry, x_refsource_SECTRACK
	http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://support.apple.com/kb/HT3216	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/29715	vdb-entry, x_refsource_BID
	http://wiki.rpath.com/Advisories:rPSA-2008-0247	x_refsource_CONFIRM
	http://www.redhat.com/support/errata/RHSA-2008-0617.html	vendor-advisory, x_refsource_REDHAT
	http://www.securityfocus.com/archive/1/493352/100/0/threaded	mailing-list, x_refsource_BUGTRAQ

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T09:14:14.550Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2009-0004.html"
          },
          {
            "name": "SUSE-SR:2009:007",
            "tags": [
              "vendor-advisory",
              "x_refsource_SUSE",
              "x_transferred"
            ],
            "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html"
          },
          {
            "name": "RHSA-2008:0618",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0618.html"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.rdancer.org/vulnerablevim.html"
          },
          {
            "name": "USN-712-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-712-1"
          },
          {
            "name": "oval:org.mitre.oval:def:6238",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6238"
          },
          {
            "name": "31681",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/31681"
          },
          {
            "name": "vim-scripts-command-execution(43083)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43083"
          },
          {
            "name": "32858",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32858"
          },
          {
            "name": "33410",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33410"
          },
          {
            "name": "APPLE-SA-2010-03-29-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html"
          },
          {
            "name": "RHSA-2008:0580",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0580.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm"
          },
          {
            "name": "34418",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/34418"
          },
          {
            "name": "ADV-2009-0904",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0904"
          },
          {
            "name": "ADV-2009-0033",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0033"
          },
          {
            "name": "20080811 rPSA-2008-0247-1 gvim vim vim-minimal",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/495319/100/0/threaded"
          },
          {
            "name": "20080614 Re: Collection of Vulnerabilities in Fully Patched Vim 7.1",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/493353/100/0/threaded"
          },
          {
            "name": "oval:org.mitre.oval:def:11109",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11109"
          },
          {
            "name": "20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/502322/100/0/threaded"
          },
          {
            "name": "[oss-security] 20080616 CVE Id request: vim",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2008/06/16/2"
          },
          {
            "name": "20080701 Re: Collection of Vulnerabilities in Fully Patched Vim 7.1",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=121494431426308\u0026w=2"
          },
          {
            "name": "ADV-2008-1851",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/1851/references"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm"
          },
          {
            "name": "30731",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/30731"
          },
          {
            "name": "32222",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32222"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT4077"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://issues.rpath.com/browse/RPL-2622"
          },
          {
            "name": "3951",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/3951"
          },
          {
            "name": "MDVSA-2008:236",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:236"
          },
          {
            "name": "ADV-2008-2780",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2780"
          },
          {
            "name": "[oss-security] 20081015 Vim CVE issues cleanup (plugins tar.vim, zip.vim) - CVE-2008-3074 and CVE-2008-3075",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2008/10/15/1"
          },
          {
            "name": "32864",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32864"
          },
          {
            "name": "1020293",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1020293"
          },
          {
            "name": "APPLE-SA-2008-10-09",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3216"
          },
          {
            "name": "29715",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/29715"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0247"
          },
          {
            "name": "RHSA-2008:0617",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0617.html"
          },
          {
            "name": "20080613 Collection of Vulnerabilities in Fully Patched Vim 7.1",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/493352/100/0/threaded"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-06-16T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using (1) filetype.vim, (3) xpm.vim, (4) gzip_vim, and (5) netrw.  NOTE: the originally reported version was 7.1.314, but the researcher actually found this set of issues in 7.1.298.  NOTE: the zipplugin issue (originally vector 2 in this identifier) has been subsumed by CVE-2008-3075."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2009-0004.html"
        },
        {
          "name": "SUSE-SR:2009:007",
          "tags": [
            "vendor-advisory",
            "x_refsource_SUSE"
          ],
          "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html"
        },
        {
          "name": "RHSA-2008:0618",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0618.html"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.rdancer.org/vulnerablevim.html"
        },
        {
          "name": "USN-712-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-712-1"
        },
        {
          "name": "oval:org.mitre.oval:def:6238",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6238"
        },
        {
          "name": "31681",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/31681"
        },
        {
          "name": "vim-scripts-command-execution(43083)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43083"
        },
        {
          "name": "32858",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32858"
        },
        {
          "name": "33410",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33410"
        },
        {
          "name": "APPLE-SA-2010-03-29-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html"
        },
        {
          "name": "RHSA-2008:0580",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0580.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm"
        },
        {
          "name": "34418",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/34418"
        },
        {
          "name": "ADV-2009-0904",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0904"
        },
        {
          "name": "ADV-2009-0033",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0033"
        },
        {
          "name": "20080811 rPSA-2008-0247-1 gvim vim vim-minimal",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/495319/100/0/threaded"
        },
        {
          "name": "20080614 Re: Collection of Vulnerabilities in Fully Patched Vim 7.1",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/493353/100/0/threaded"
        },
        {
          "name": "oval:org.mitre.oval:def:11109",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11109"
        },
        {
          "name": "20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/502322/100/0/threaded"
        },
        {
          "name": "[oss-security] 20080616 CVE Id request: vim",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2008/06/16/2"
        },
        {
          "name": "20080701 Re: Collection of Vulnerabilities in Fully Patched Vim 7.1",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=121494431426308\u0026w=2"
        },
        {
          "name": "ADV-2008-1851",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/1851/references"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm"
        },
        {
          "name": "30731",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/30731"
        },
        {
          "name": "32222",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32222"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT4077"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://issues.rpath.com/browse/RPL-2622"
        },
        {
          "name": "3951",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/3951"
        },
        {
          "name": "MDVSA-2008:236",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:236"
        },
        {
          "name": "ADV-2008-2780",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2780"
        },
        {
          "name": "[oss-security] 20081015 Vim CVE issues cleanup (plugins tar.vim, zip.vim) - CVE-2008-3074 and CVE-2008-3075",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2008/10/15/1"
        },
        {
          "name": "32864",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32864"
        },
        {
          "name": "1020293",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1020293"
        },
        {
          "name": "APPLE-SA-2008-10-09",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3216"
        },
        {
          "name": "29715",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/29715"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0247"
        },
        {
          "name": "RHSA-2008:0617",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0617.html"
        },
        {
          "name": "20080613 Collection of Vulnerabilities in Fully Patched Vim 7.1",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/493352/100/0/threaded"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-2712",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using (1) filetype.vim, (3) xpm.vim, (4) gzip_vim, and (5) netrw.  NOTE: the originally reported version was 7.1.314, but the researcher actually found this set of issues in 7.1.298.  NOTE: the zipplugin issue (originally vector 2 in this identifier) has been subsumed by CVE-2008-3075."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2009-0004.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2009-0004.html"
            },
            {
              "name": "SUSE-SR:2009:007",
              "refsource": "SUSE",
              "url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html"
            },
            {
              "name": "RHSA-2008:0618",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0618.html"
            },
            {
              "name": "http://www.rdancer.org/vulnerablevim.html",
              "refsource": "MISC",
              "url": "http://www.rdancer.org/vulnerablevim.html"
            },
            {
              "name": "USN-712-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-712-1"
            },
            {
              "name": "oval:org.mitre.oval:def:6238",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6238"
            },
            {
              "name": "31681",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/31681"
            },
            {
              "name": "vim-scripts-command-execution(43083)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43083"
            },
            {
              "name": "32858",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32858"
            },
            {
              "name": "33410",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33410"
            },
            {
              "name": "APPLE-SA-2010-03-29-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html"
            },
            {
              "name": "RHSA-2008:0580",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0580.html"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm"
            },
            {
              "name": "34418",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/34418"
            },
            {
              "name": "ADV-2009-0904",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0904"
            },
            {
              "name": "ADV-2009-0033",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0033"
            },
            {
              "name": "20080811 rPSA-2008-0247-1 gvim vim vim-minimal",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/495319/100/0/threaded"
            },
            {
              "name": "20080614 Re: Collection of Vulnerabilities in Fully Patched Vim 7.1",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/493353/100/0/threaded"
            },
            {
              "name": "oval:org.mitre.oval:def:11109",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11109"
            },
            {
              "name": "20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/502322/100/0/threaded"
            },
            {
              "name": "[oss-security] 20080616 CVE Id request: vim",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2008/06/16/2"
            },
            {
              "name": "20080701 Re: Collection of Vulnerabilities in Fully Patched Vim 7.1",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=121494431426308\u0026w=2"
            },
            {
              "name": "ADV-2008-1851",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/1851/references"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm"
            },
            {
              "name": "30731",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/30731"
            },
            {
              "name": "32222",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32222"
            },
            {
              "name": "http://support.apple.com/kb/HT4077",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT4077"
            },
            {
              "name": "https://issues.rpath.com/browse/RPL-2622",
              "refsource": "CONFIRM",
              "url": "https://issues.rpath.com/browse/RPL-2622"
            },
            {
              "name": "3951",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/3951"
            },
            {
              "name": "MDVSA-2008:236",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:236"
            },
            {
              "name": "ADV-2008-2780",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/2780"
            },
            {
              "name": "[oss-security] 20081015 Vim CVE issues cleanup (plugins tar.vim, zip.vim) - CVE-2008-3074 and CVE-2008-3075",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2008/10/15/1"
            },
            {
              "name": "32864",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32864"
            },
            {
              "name": "1020293",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1020293"
            },
            {
              "name": "APPLE-SA-2008-10-09",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html"
            },
            {
              "name": "http://support.apple.com/kb/HT3216",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3216"
            },
            {
              "name": "29715",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/29715"
            },
            {
              "name": "http://wiki.rpath.com/Advisories:rPSA-2008-0247",
              "refsource": "CONFIRM",
              "url": "http://wiki.rpath.com/Advisories:rPSA-2008-0247"
            },
            {
              "name": "RHSA-2008:0617",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0617.html"
            },
            {
              "name": "20080613 Collection of Vulnerabilities in Fully Patched Vim 7.1",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/493352/100/0/threaded"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-2712",
    "datePublished": "2008-06-16T21:00:00",
    "dateReserved": "2008-06-16T00:00:00",
    "dateUpdated": "2024-08-07T09:14:14.550Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

cve-2008-4101

Vulnerability from cvelistv5

Published

2008-09-18 17:47

Modified

2024-08-07 10:00

Severity ?

Summary

Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a ";" (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) "Ctrl-]" (control close-square-bracket) or (3) "g]" (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712.

References

▼	URL	Tags
	http://www.vmware.com/security/advisories/VMSA-2009-0004.html	x_refsource_CONFIRM
	http://ftp.vim.org/pub/vim/patches/7.2/7.2.010	mailing-list, x_refsource_MLIST
	http://www.redhat.com/support/errata/RHSA-2008-0618.html	vendor-advisory, x_refsource_REDHAT
	http://www.openwall.com/lists/oss-security/2008/09/16/5	mailing-list, x_refsource_MLIST
	http://secunia.com/advisories/31592	third-party-advisory, x_refsource_SECUNIA
	http://www.securityfocus.com/archive/1/495703	mailing-list, x_refsource_BUGTRAQ
	http://www.ubuntu.com/usn/USN-712-1	vendor-advisory, x_refsource_UBUNTU
	http://www.openwall.com/lists/oss-security/2008/09/11/4	mailing-list, x_refsource_MLIST
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10894	vdb-entry, signature, x_refsource_OVAL
	http://www.securityfocus.com/bid/31681	vdb-entry, x_refsource_BID
	http://www.openwall.com/lists/oss-security/2008/09/16/6	mailing-list, x_refsource_MLIST
	http://secunia.com/advisories/32858	third-party-advisory, x_refsource_SECUNIA
	http://secunia.com/advisories/33410	third-party-advisory, x_refsource_SECUNIA
	http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://www.redhat.com/support/errata/RHSA-2008-0580.html	vendor-advisory, x_refsource_REDHAT
	http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm	x_refsource_CONFIRM
	https://exchange.xforce.ibmcloud.com/vulnerabilities/44626	vdb-entry, x_refsource_XF
	http://www.vupen.com/english/advisories/2009/0904	vdb-entry, x_refsource_VUPEN
	http://www.vupen.com/english/advisories/2009/0033	vdb-entry, x_refsource_VUPEN
	http://www.securityfocus.com/archive/1/502322/100/0/threaded	mailing-list, x_refsource_BUGTRAQ
	http://groups.google.com/group/vim_dev/attach/dd32ad3a84f36bb2/K-arbitrary-command-execution.patch?part=2	x_refsource_MISC
	https://bugzilla.redhat.com/show_bug.cgi?id=461927	x_refsource_CONFIRM
	http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm	x_refsource_CONFIRM
	http://secunia.com/advisories/32222	third-party-advisory, x_refsource_SECUNIA
	http://support.apple.com/kb/HT4077	x_refsource_CONFIRM
	http://www.securityfocus.com/bid/30795	vdb-entry, x_refsource_BID
	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5812	vdb-entry, signature, x_refsource_OVAL
	http://groups.google.com/group/vim_dev/attach/9290f26f9bc11b33/K-arbitrary-command-execution.patch.v3?part=2	x_refsource_MISC
	http://www.openwall.com/lists/oss-security/2008/09/11/3	mailing-list, x_refsource_MLIST
	http://www.securityfocus.com/archive/1/495662	mailing-list, x_refsource_BUGTRAQ
	http://www.mandriva.com/security/advisories?name=MDVSA-2008:236	vendor-advisory, x_refsource_MANDRIVA
	http://www.vupen.com/english/advisories/2008/2780	vdb-entry, x_refsource_VUPEN
	http://secunia.com/advisories/32864	third-party-advisory, x_refsource_SECUNIA
	http://groups.google.com/group/vim_dev/msg/9290f26f9bc11b33	mailing-list, x_refsource_MLIST
	http://www.rdancer.org/vulnerablevim-K.html	x_refsource_MISC
	http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html	vendor-advisory, x_refsource_APPLE
	http://support.apple.com/kb/HT3216	x_refsource_CONFIRM
	http://groups.google.com/group/vim_dev/browse_thread/thread/1434d0812b5c817e/6ad2d5b50a96668e	x_refsource_MISC
	http://www.redhat.com/support/errata/RHSA-2008-0617.html	vendor-advisory, x_refsource_REDHAT

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T10:00:42.874Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.vmware.com/security/advisories/VMSA-2009-0004.html"
          },
          {
            "name": "[vim-dev] 20080903 Patch 7.2.010",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://ftp.vim.org/pub/vim/patches/7.2/7.2.010"
          },
          {
            "name": "RHSA-2008:0618",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0618.html"
          },
          {
            "name": "[oss-security] 20080915 Re: [oss-list] CVE request (vim)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2008/09/16/5"
          },
          {
            "name": "31592",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/31592"
          },
          {
            "name": "20080825 RE: Arbitrary Code Execution in Commands: K, Control-], g]",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/495703"
          },
          {
            "name": "USN-712-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_UBUNTU",
              "x_transferred"
            ],
            "url": "http://www.ubuntu.com/usn/USN-712-1"
          },
          {
            "name": "[oss-security] 20080911 Re: [oss-list] CVE request (vim)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2008/09/11/4"
          },
          {
            "name": "oval:org.mitre.oval:def:10894",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10894"
          },
          {
            "name": "31681",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/31681"
          },
          {
            "name": "[oss-security] 20080915 Re: [oss-list] CVE request (vim)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2008/09/16/6"
          },
          {
            "name": "32858",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32858"
          },
          {
            "name": "33410",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/33410"
          },
          {
            "name": "APPLE-SA-2010-03-29-1",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html"
          },
          {
            "name": "RHSA-2008:0580",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0580.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm"
          },
          {
            "name": "vim-normal-command-execution(44626)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44626"
          },
          {
            "name": "ADV-2009-0904",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0904"
          },
          {
            "name": "ADV-2009-0033",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2009/0033"
          },
          {
            "name": "20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/502322/100/0/threaded"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://groups.google.com/group/vim_dev/attach/dd32ad3a84f36bb2/K-arbitrary-command-execution.patch?part=2"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://bugzilla.redhat.com/show_bug.cgi?id=461927"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm"
          },
          {
            "name": "32222",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32222"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT4077"
          },
          {
            "name": "30795",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/30795"
          },
          {
            "name": "oval:org.mitre.oval:def:5812",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5812"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://groups.google.com/group/vim_dev/attach/9290f26f9bc11b33/K-arbitrary-command-execution.patch.v3?part=2"
          },
          {
            "name": "[oss-security] 20080911 [oss-list] CVE request (vim)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2008/09/11/3"
          },
          {
            "name": "20080822 Vim: Arbitrary Code Execution in Commands: K, Control-], g]",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/495662"
          },
          {
            "name": "MDVSA-2008:236",
            "tags": [
              "vendor-advisory",
              "x_refsource_MANDRIVA",
              "x_transferred"
            ],
            "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:236"
          },
          {
            "name": "ADV-2008-2780",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2008/2780"
          },
          {
            "name": "32864",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/32864"
          },
          {
            "name": "[vim_dev] 20080824 Bug with v_K and potentially K command",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://groups.google.com/group/vim_dev/msg/9290f26f9bc11b33"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.rdancer.org/vulnerablevim-K.html"
          },
          {
            "name": "APPLE-SA-2008-10-09",
            "tags": [
              "vendor-advisory",
              "x_refsource_APPLE",
              "x_transferred"
            ],
            "url": "http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://support.apple.com/kb/HT3216"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://groups.google.com/group/vim_dev/browse_thread/thread/1434d0812b5c817e/6ad2d5b50a96668e"
          },
          {
            "name": "RHSA-2008:0617",
            "tags": [
              "vendor-advisory",
              "x_refsource_REDHAT",
              "x_transferred"
            ],
            "url": "http://www.redhat.com/support/errata/RHSA-2008-0617.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2008-08-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a \";\" (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) \"Ctrl-]\" (control close-square-bracket) or (3) \"g]\" (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-11T19:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.vmware.com/security/advisories/VMSA-2009-0004.html"
        },
        {
          "name": "[vim-dev] 20080903 Patch 7.2.010",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://ftp.vim.org/pub/vim/patches/7.2/7.2.010"
        },
        {
          "name": "RHSA-2008:0618",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0618.html"
        },
        {
          "name": "[oss-security] 20080915 Re: [oss-list] CVE request (vim)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2008/09/16/5"
        },
        {
          "name": "31592",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/31592"
        },
        {
          "name": "20080825 RE: Arbitrary Code Execution in Commands: K, Control-], g]",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/495703"
        },
        {
          "name": "USN-712-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_UBUNTU"
          ],
          "url": "http://www.ubuntu.com/usn/USN-712-1"
        },
        {
          "name": "[oss-security] 20080911 Re: [oss-list] CVE request (vim)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2008/09/11/4"
        },
        {
          "name": "oval:org.mitre.oval:def:10894",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10894"
        },
        {
          "name": "31681",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/31681"
        },
        {
          "name": "[oss-security] 20080915 Re: [oss-list] CVE request (vim)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2008/09/16/6"
        },
        {
          "name": "32858",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32858"
        },
        {
          "name": "33410",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/33410"
        },
        {
          "name": "APPLE-SA-2010-03-29-1",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html"
        },
        {
          "name": "RHSA-2008:0580",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0580.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm"
        },
        {
          "name": "vim-normal-command-execution(44626)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44626"
        },
        {
          "name": "ADV-2009-0904",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0904"
        },
        {
          "name": "ADV-2009-0033",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2009/0033"
        },
        {
          "name": "20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/502322/100/0/threaded"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://groups.google.com/group/vim_dev/attach/dd32ad3a84f36bb2/K-arbitrary-command-execution.patch?part=2"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=461927"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm"
        },
        {
          "name": "32222",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32222"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT4077"
        },
        {
          "name": "30795",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/30795"
        },
        {
          "name": "oval:org.mitre.oval:def:5812",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5812"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://groups.google.com/group/vim_dev/attach/9290f26f9bc11b33/K-arbitrary-command-execution.patch.v3?part=2"
        },
        {
          "name": "[oss-security] 20080911 [oss-list] CVE request (vim)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2008/09/11/3"
        },
        {
          "name": "20080822 Vim: Arbitrary Code Execution in Commands: K, Control-], g]",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/495662"
        },
        {
          "name": "MDVSA-2008:236",
          "tags": [
            "vendor-advisory",
            "x_refsource_MANDRIVA"
          ],
          "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:236"
        },
        {
          "name": "ADV-2008-2780",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2008/2780"
        },
        {
          "name": "32864",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/32864"
        },
        {
          "name": "[vim_dev] 20080824 Bug with v_K and potentially K command",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://groups.google.com/group/vim_dev/msg/9290f26f9bc11b33"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.rdancer.org/vulnerablevim-K.html"
        },
        {
          "name": "APPLE-SA-2008-10-09",
          "tags": [
            "vendor-advisory",
            "x_refsource_APPLE"
          ],
          "url": "http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://support.apple.com/kb/HT3216"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://groups.google.com/group/vim_dev/browse_thread/thread/1434d0812b5c817e/6ad2d5b50a96668e"
        },
        {
          "name": "RHSA-2008:0617",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "http://www.redhat.com/support/errata/RHSA-2008-0617.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2008-4101",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a \";\" (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) \"Ctrl-]\" (control close-square-bracket) or (3) \"g]\" (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.vmware.com/security/advisories/VMSA-2009-0004.html",
              "refsource": "CONFIRM",
              "url": "http://www.vmware.com/security/advisories/VMSA-2009-0004.html"
            },
            {
              "name": "[vim-dev] 20080903 Patch 7.2.010",
              "refsource": "MLIST",
              "url": "http://ftp.vim.org/pub/vim/patches/7.2/7.2.010"
            },
            {
              "name": "RHSA-2008:0618",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0618.html"
            },
            {
              "name": "[oss-security] 20080915 Re: [oss-list] CVE request (vim)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2008/09/16/5"
            },
            {
              "name": "31592",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/31592"
            },
            {
              "name": "20080825 RE: Arbitrary Code Execution in Commands: K, Control-], g]",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/495703"
            },
            {
              "name": "USN-712-1",
              "refsource": "UBUNTU",
              "url": "http://www.ubuntu.com/usn/USN-712-1"
            },
            {
              "name": "[oss-security] 20080911 Re: [oss-list] CVE request (vim)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2008/09/11/4"
            },
            {
              "name": "oval:org.mitre.oval:def:10894",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10894"
            },
            {
              "name": "31681",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/31681"
            },
            {
              "name": "[oss-security] 20080915 Re: [oss-list] CVE request (vim)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2008/09/16/6"
            },
            {
              "name": "32858",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32858"
            },
            {
              "name": "33410",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/33410"
            },
            {
              "name": "APPLE-SA-2010-03-29-1",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html"
            },
            {
              "name": "RHSA-2008:0580",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0580.html"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm"
            },
            {
              "name": "vim-normal-command-execution(44626)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44626"
            },
            {
              "name": "ADV-2009-0904",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0904"
            },
            {
              "name": "ADV-2009-0033",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2009/0033"
            },
            {
              "name": "20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/502322/100/0/threaded"
            },
            {
              "name": "http://groups.google.com/group/vim_dev/attach/dd32ad3a84f36bb2/K-arbitrary-command-execution.patch?part=2",
              "refsource": "MISC",
              "url": "http://groups.google.com/group/vim_dev/attach/dd32ad3a84f36bb2/K-arbitrary-command-execution.patch?part=2"
            },
            {
              "name": "https://bugzilla.redhat.com/show_bug.cgi?id=461927",
              "refsource": "CONFIRM",
              "url": "https://bugzilla.redhat.com/show_bug.cgi?id=461927"
            },
            {
              "name": "http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm",
              "refsource": "CONFIRM",
              "url": "http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm"
            },
            {
              "name": "32222",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32222"
            },
            {
              "name": "http://support.apple.com/kb/HT4077",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT4077"
            },
            {
              "name": "30795",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/30795"
            },
            {
              "name": "oval:org.mitre.oval:def:5812",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5812"
            },
            {
              "name": "http://groups.google.com/group/vim_dev/attach/9290f26f9bc11b33/K-arbitrary-command-execution.patch.v3?part=2",
              "refsource": "MISC",
              "url": "http://groups.google.com/group/vim_dev/attach/9290f26f9bc11b33/K-arbitrary-command-execution.patch.v3?part=2"
            },
            {
              "name": "[oss-security] 20080911 [oss-list] CVE request (vim)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2008/09/11/3"
            },
            {
              "name": "20080822 Vim: Arbitrary Code Execution in Commands: K, Control-], g]",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/495662"
            },
            {
              "name": "MDVSA-2008:236",
              "refsource": "MANDRIVA",
              "url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:236"
            },
            {
              "name": "ADV-2008-2780",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2008/2780"
            },
            {
              "name": "32864",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/32864"
            },
            {
              "name": "[vim_dev] 20080824 Bug with v_K and potentially K command",
              "refsource": "MLIST",
              "url": "http://groups.google.com/group/vim_dev/msg/9290f26f9bc11b33"
            },
            {
              "name": "http://www.rdancer.org/vulnerablevim-K.html",
              "refsource": "MISC",
              "url": "http://www.rdancer.org/vulnerablevim-K.html"
            },
            {
              "name": "APPLE-SA-2008-10-09",
              "refsource": "APPLE",
              "url": "http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html"
            },
            {
              "name": "http://support.apple.com/kb/HT3216",
              "refsource": "CONFIRM",
              "url": "http://support.apple.com/kb/HT3216"
            },
            {
              "name": "http://groups.google.com/group/vim_dev/browse_thread/thread/1434d0812b5c817e/6ad2d5b50a96668e",
              "refsource": "MISC",
              "url": "http://groups.google.com/group/vim_dev/browse_thread/thread/1434d0812b5c817e/6ad2d5b50a96668e"
            },
            {
              "name": "RHSA-2008:0617",
              "refsource": "REDHAT",
              "url": "http://www.redhat.com/support/errata/RHSA-2008-0617.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2008-4101",
    "datePublished": "2008-09-18T17:47:00",
    "dateReserved": "2008-09-15T00:00:00",
    "dateUpdated": "2024-08-07T10:00:42.874Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

rhsa-2008_0618

Vulnerability from csaf_redhat

cve-2008-2712

Vulnerability from cvelistv5

cve-2008-4101

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature