Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Vim Modelines Arbitrary Command Execution Variant Vulnerability

Solution:
SGI has released advisory 20050102-01-U to address various issues in SGI Advanced Linux Environment 3. This advisory includes updated SGI ProPack 3 Service Pack 3 packages (patch10132.tar.gz). Please see the referenced advisory for more information.

Gentoo has released updates to address this issue. These updates may be applied by issuing the following commands for Vim and gVim respectively:

(vim)
emerge --sync
emerge --ask --oneshot --verbose ">=app-editors/vim-6.3-r2"

(gVim)
emerge --sync
emerge --ask --oneshot --verbose ">=app-editors/gvim-6.3-r2"

The vendor has addressed this issue in Vim 6.3.045 and later releases. An updated release may be obtained by download the latest 6.3 release from the vim.org downloads page or through CVS.

OpenPKG has released an advisory dealing with this issue. Please see the referenced advisory for more information.

Ubuntu has released an advisory dealing with this issue. Please see the referenced advisory for more information.

Red Hat has released advisory RHSA-2005:010-05 to address this issue in Red Hat Enterprise Linux. Please see the advisory in Web references for more information.

Mandrake has released advisory MDKSA-2005:003 to address this vulnerability. Please see the attached advisory for details on obtaining and applying fixes.

Avaya has released advisory ASA-2005-020 to document the affected versions of Avaya products. Please see the referenced advisory for further information.

Fedora Legacy has released advisory FLSA:2343 to adress this issue for various Red Hat Linux releases and Fedora Core 1. Please see the referenced advisory for further information.

IPCop has released version 1.4.6 to address this issue.


IPCop IPCop 1.4.1

IPCop IPCop 1.4.2

IPCop IPCop 1.4.4

IPCop IPCop 1.4.5

SGI ProPack 3.0

VIM Development Group VIM 5.0

VIM Development Group VIM 5.1

VIM Development Group VIM 5.2

VIM Development Group VIM 5.3

VIM Development Group VIM 5.4

VIM Development Group VIM 5.5

VIM Development Group VIM 5.6

VIM Development Group VIM 5.7

VIM Development Group VIM 5.8

VIM Development Group VIM 6.0

VIM Development Group VIM 6.1

VIM Development Group VIM 6.2

VIM Development Group VIM 6.3 .030

VIM Development Group VIM 6.3 .025

VIM Development Group VIM 6.3 .011







 

Privacy Statement
Copyright 2008, SecurityFocus