National Cyber Awareness System

Vulnerability Summary for CVE-2008-2712

Overview

Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using (1) filetype.vim, (3) xpm.vim, (4) gzip_vim, and (5) netrw. NOTE: the originally reported version was 7.1.314, but the researcher actually found this set of issues in 7.1.298. NOTE: the zipplugin issue (originally vector 2 in this identifier) has been subsumed by CVE-2008-3075.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: https://issues.rpath.com/browse/RPL-2622

Hyperlink:https://issues.rpath.com/browse/RPL-2622

External Source: XF

Name: vim-scripts-command-execution(43083)

Hyperlink:http://xforce.iss.net/xforce/xfdb/43083

External Source: VUPEN

Name: ADV-2009-0904

Hyperlink:http://www.vupen.com/english/advisories/2009/0904

External Source: VUPEN

Name: ADV-2009-0033

Hyperlink:http://www.vupen.com/english/advisories/2009/0033

External Source: VUPEN

Name: ADV-2008-2780

Hyperlink:http://www.vupen.com/english/advisories/2008/2780

External Source: VUPEN

Name: ADV-2008-1851

Hyperlink:http://www.vupen.com/english/advisories/2008/1851/references

External Source: CONFIRM

Name: http://www.vmware.com/security/advisories/VMSA-2009-0004.html

Hyperlink:http://www.vmware.com/security/advisories/VMSA-2009-0004.html

External Source: UBUNTU

Name: USN-712-1

Hyperlink:http://www.ubuntu.com/usn/USN-712-1

External Source: SECTRACK

Name: 1020293

Hyperlink:http://www.securitytracker.com/id?1020293

External Source: BID

Name: 31681

Hyperlink:http://www.securityfocus.com/bid/31681

External Source: BID

Name: 29715

Hyperlink:http://www.securityfocus.com/bid/29715

External Source: BUGTRAQ

Name: 20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/502322/100/0/threaded

External Source: BUGTRAQ

Name: 20080811 rPSA-2008-0247-1 gvim vim vim-minimal

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/495319/100/0/threaded

External Source: BUGTRAQ

Name: 20080614 Re: Collection of Vulnerabilities in Fully Patched Vim 7.1

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/493353/100/0/threaded

External Source: BUGTRAQ

Name: 20080613 Collection of Vulnerabilities in Fully Patched Vim 7.1

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/493352/100/0/threaded

External Source: REDHAT

Name: RHSA-2008:0618

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0618.html

External Source: REDHAT

Name: RHSA-2008:0617

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0617.html

External Source: REDHAT

Name: RHSA-2008:0580

Hyperlink:http://www.redhat.com/support/errata/RHSA-2008-0580.html

External Source: MISC

Name: http://www.rdancer.org/vulnerablevim.html

Hyperlink:http://www.rdancer.org/vulnerablevim.html

External Source: MLIST

Name: [oss-security] 20081015 Vim CVE issues cleanup (plugins tar.vim, zip.vim) - CVE-2008-3074 and CVE-2008-3075

Hyperlink:http://www.openwall.com/lists/oss-security/2008/10/15/1

External Source: MLIST

Name: [oss-security] 20080616 CVE Id request: vim

Hyperlink:http://www.openwall.com/lists/oss-security/2008/06/16/2

External Source: MANDRIVA

Name: MDVSA-2008:236

Hyperlink:http://www.mandriva.com/security/advisories?name=MDVSA-2008:236

External Source: CONFIRM

Name: http://wiki.rpath.com/Advisories:rPSA-2008-0247

Hyperlink:http://wiki.rpath.com/Advisories:rPSA-2008-0247

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm

External Source: CONFIRM

Name: http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm

Hyperlink:http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm

External Source: CONFIRM

Name: http://support.apple.com/kb/HT4077

Hyperlink:http://support.apple.com/kb/HT4077

External Source: CONFIRM

Name: http://support.apple.com/kb/HT3216

Hyperlink:http://support.apple.com/kb/HT3216

External Source: SREASON

Name: 3951

Hyperlink:http://securityreason.com/securityalert/3951

External Source: SECUNIA

Name: 34418

Hyperlink:http://secunia.com/advisories/34418

External Source: SECUNIA

Name: 33410

Hyperlink:http://secunia.com/advisories/33410

External Source: SECUNIA

Name: 32864

Hyperlink:http://secunia.com/advisories/32864

External Source: SECUNIA

Name: 32858

Hyperlink:http://secunia.com/advisories/32858

External Source: SECUNIA

Name: 32222

Hyperlink:http://secunia.com/advisories/32222

External Source: SECUNIA

Name: 30731

Hyperlink:http://secunia.com/advisories/30731

External Source: OVAL

Name: oval:org.mitre.oval:def:6238

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6238

External Source: OVAL

Name: oval:org.mitre.oval:def:11109

Hyperlink:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11109

External Source: BUGTRAQ

Name: 20080701 Re: Collection of Vulnerabilities in Fully Patched Vim 7.1

Hyperlink:http://marc.info/?l=bugtraq&m=121494431426308&w=2

External Source: SUSE

Name: SUSE-SR:2009:007

Hyperlink:http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html

External Source: APPLE

Name: APPLE-SA-2010-03-29-1

Hyperlink:http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html

External Source: APPLE

Name: APPLE-SA-2008-10-09

Hyperlink:http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html

References to Check Content

Identifier:oval:org.mitre.oval:def:11109

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:11109

Identifier:oval:org.mitre.oval:def:6238

Check System:http://oval.mitre.org/XMLSchema/oval-definitions-5

Hyperlink:http://oval.mitre.org/repository/data/DownloadDefinition?id=oval:org.mitre.oval:def:6238