info
discussion
exploit
solution
references
VIM ModeLines Arbitrary Command Execution Vulnerability
References:
CSSA-2004-015.0 OpenLinux: vim arbitrary commands execution through modelines
(SCO)
RHSA-2002:297-19 Updated vim packages fix modeline vulnerability
(Red Hat)
Sun Linux VIM Package May Give Unprivileged Users the Ability to Execute Arbitra
(Sun)
The First VIM Worm
(SecuriTeam)
Privacy Statement
Copyright 2010, SecurityFocus