Vim ModeLines Further Variant Arbitrary Command Execution Vulnerability

Bugtraq ID: 14374
Class: Input Validation Error
CVE: CVE-2005-2368
Remote: Yes
Local: No
Published: Jul 25 2005 12:00AM
Updated: Jul 12 2009 04:06PM
Credit: Discovery of this issue is credited to Georgi Guninski.
Vulnerable: VIM Development Group VIM 6.3 .081
VIM Development Group VIM 6.3 .080
VIM Development Group VIM 6.3 .045
VIM Development Group VIM 6.3 .044
VIM Development Group VIM 6.3 .030
VIM Development Group VIM 6.3 .025
VIM Development Group VIM 6.3 .011
VIM Development Group VIM 6.3
VIM Development Group VIM 6.2
VIM Development Group VIM 6.1
VIM Development Group VIM 6.0
VIM Development Group VIM 5.8
VIM Development Group VIM 5.7
VIM Development Group VIM 5.6
VIM Development Group VIM 5.5
VIM Development Group VIM 5.4
VIM Development Group VIM 5.3
VIM Development Group VIM 5.2
VIM Development Group VIM 5.1
VIM Development Group VIM 5.0
Ubuntu Ubuntu Linux 5.0 4 powerpc
Ubuntu Ubuntu Linux 5.0 4 i386
Ubuntu Ubuntu Linux 5.0 4 amd64
Ubuntu Ubuntu Linux 4.1 ppc
Ubuntu Ubuntu Linux 4.1 ia64
Ubuntu Ubuntu Linux 4.1 ia32
Trustix Secure Linux 2.2
Trustix Secure Linux 2.1
Trustix Secure Enterprise Linux 2.0
SGI ProPack 3.0 SP6
SCO OpenLinux Workstation 3.1.1
SCO OpenLinux Server 3.1.1
Redhat Fedora Core4
Redhat Fedora Core3
Redhat Enterprise Linux WS 4
Redhat Enterprise Linux WS 3
Redhat Enterprise Linux WS 2.1 IA64
Redhat Enterprise Linux WS 2.1
Redhat Enterprise Linux ES 4
Redhat Enterprise Linux ES 3
Redhat Enterprise Linux ES 2.1 IA64
Redhat Enterprise Linux ES 2.1
Redhat Enterprise Linux AS 4
Redhat Enterprise Linux AS 3
Redhat Enterprise Linux AS 2.1 IA64
Redhat Enterprise Linux AS 2.1
Redhat Desktop 4.0
Redhat Desktop 3.0
Redhat Advanced Workstation for the Itanium Processor 2.1 IA64
Redhat Advanced Workstation for the Itanium Processor 2.1
Mandriva Linux Mandrake 10.2 x86_64
Mandriva Linux Mandrake 10.2
Mandriva Linux Mandrake 10.1 x86_64
Mandriva Linux Mandrake 10.1
Mandriva Linux Mandrake 10.0 AMD64
Mandriva Linux Mandrake 10.0
MandrakeSoft Multi Network Firewall 2.0
MandrakeSoft Corporate Server 3.0 x86_64
MandrakeSoft Corporate Server 3.0
MandrakeSoft Corporate Server 2.1 x86_64
MandrakeSoft Corporate Server 2.1
Avaya S8710 R2.0.1
Avaya S8710 R2.0.0
Avaya S8700 R2.0.1
Avaya S8700 R2.0.0
Avaya S8500 R2.0.1
Avaya S8500 R2.0.0
Avaya S8300 R2.0.1
Avaya S8300 R2.0.0
Avaya Network Routing
Avaya Modular Messaging (MSS) 2.0
Avaya Modular Messaging (MSS) 1.1
Avaya MN100
Avaya Intuity LX
Avaya Integrated Management 2.1
Avaya Integrated Management
Avaya CVLAN
Avaya Converged Communications Server 2.0
Not Vulnerable: VIM Development Group VIM 6.3 .082


 

Privacy Statement
Copyright 2010, SecurityFocus