• info
• discussion
• exploit
• solution
• references

Vim Swap File Race Condition Vulnerability

Solution:
Vendor updates that rectify this issue are available:


VIM Development Group VIM 5.7

• S.u.S.E. 6.1 alpha gvim-5.7-57.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/6.1/xap1/gvim-5.7-57.alpha.rpm


• S.u.S.E. 6.1 alpha vim-5.7-57.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/6.1/a1/vim-5.7-57.alpha.rpm


• S.u.S.E. 6.1 i386 gvim-5.7-78.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.1/xap1/gvim-5.7-78.i386.rpm


• S.u.S.E. 6.1 i386 vim-5.7-72.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.1/a1/vim-5.7-72.i386.rpm


• S.u.S.E. 6.2 i386 gvim-5.7-77.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.2/xap1/gvim-5.7-77.i386.rpm


• S.u.S.E. 6.2 i386 vim-5.7-71.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.2/a1/vim-5.7-71.i386.rpm


• S.u.S.E. 6.3 alpha gvim-5.7-57.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/6.3/xap1/gvim-5.7-57.alpha.rpm


• S.u.S.E. 6.3 alpha vim-5.7-57.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/6.3/a1/vim-5.7-57.alpha.rpm


• S.u.S.E. 6.3 i386 gvim-5.7-78.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.3/xap1/gvim-5.7-78.i386.rpm


• S.u.S.E. 6.3 i386 vim-5.7-72.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.3/a1/vim-5.7-72.i386.rpm


• S.u.S.E. 6.4 alpha gvim-5.7-57.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/6.4/xap1/gvim-5.7-57.alpha.rpm


• S.u.S.E. 6.4 alpha vim-5.7-57.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/6.4/a1/vim-5.7-57.alpha.rpm


• S.u.S.E. 6.4 i386 gvim-5.7-78.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.4/xap1/gvim-5.7-78.i386.rpm


• S.u.S.E. 6.4 i386 vim-5.7-72.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/6.4/a1/vim-5.7-72.i386.rpm


• S.u.S.E. 6.4 ppc gvim-5.7-57.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/6.4/xap1/gvim-5.7-57.ppc.rpm


• S.u.S.E. 6.4 ppc vim-5.7-19.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/6.4/a1/vim-5.7-19.ppc.rpm


• S.u.S.E. 7.0 alpha vim-5.7-57.alpha.rpm
  ftp://ftp.suse.com/pub/suse/axp/update/7.0/a1/vim-5.7-57.alpha.rpm


• S.u.S.E. 7.0 i386 gvim-5.7-79.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.0/xap1/gvim-5.7-79.i386.rpm


• S.u.S.E. 7.0 i386 vim-5.7-73.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.0/a1/vim-5.7-73.i386.rpm


• S.u.S.E. 7.0 ppc gvim-5.7-58.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.0/xap1/gvim-5.7-58.ppc.rpm


• S.u.S.E. 7.0 ppc vim-5.7-20.ppc.rpm
  ftp://ftp.suse.com/pub/suse/ppc/update/7.0/a1/vim-5.7-20.ppc.rpm


• S.u.S.E. 7.0 sparc gvim-5.7-59.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.0/xap1/gvim-5.7-59.sparc.rp m


• S.u.S.E. 7.0 sparc vim-5.7-54.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.0/a1/vim-5.7-54.sparc.rpm


• S.u.S.E. 7.1 i386 gvim-5.7-79.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.1/xap2/gvim-5.7-79.i386.rpm


• S.u.S.E. 7.1 i386 vim-5.7-71.i386.rpm
  ftp://ftp.suse.com/pub/suse/i386/update/7.1/a1/vim-5.7-71.i386.rpm


• S.u.S.E. 7.1 sparc vim-5.7-54.sparc.rpm
  ftp://ftp.suse.com/pub/suse/sparc/update/7.1/a1/vim-5.7-54.sparc.rpm