Red Hat Security AdvisoryRHSA-2008:0618
vim security update
Released 2008-11-25 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 vim-1:6.0-7.25, vim-X11-1:6.0-7.25.i386, vim-X11-1:6.0-7.25.ia64 +6
- Red Hat Enterprise Linux ES version 2.1 vim-1:6.0-7.25, vim-X11-1:6.0-7.25.i386, vim-common-1:6.0-7.25.i386 +2
- Red Hat Enterprise Linux WS version 2.1 vim-1:6.0-7.25, vim-X11-1:6.0-7.25.i386, vim-common-1:6.0-7.25.i386 +2
- Red Hat Linux Advanced Workstation 2.1 vim-1:6.0-7.25, vim-X11-1:6.0-7.25.ia64, vim-common-1:6.0-7.25.ia64 +2
Fixes 2 records
Priority MEDIUM 56
Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrat…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.15044 · Published 2008-06-16 · Fixed CWE-20
Priority MEDIUM 52
Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a ";" (semicolon) fol…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.09207 · Published 2008-09-18 · Fixed CWE-20
