Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Производитель ПО
Наименование ПО
vim
(Unknown)
Описание
Функция shellescape в Vim позволяет злоумышленникам выполнить произвольный код, используя спецсимволы интерпретатора командной строки "!" (восклицательный знак) в имени файла архива ZIP и, возможно, в имени первого файла в архиве ZIP, что некорректно обрабатывается плагином VIM ZIP plugin (zipPlugin.vim) как показано примере наборов тестов zipplugin и zipplugin.v2. Для эксплуатации уязвимости необходимы активные действия со стороны пользователя.
Как исправить
Для устранения уязвимости необходимо установить последнюю версию продукта, соответствующую используемой платформе. Необходимую информацию можно получить по адресу:
http://www.vim.org/
http://www.vim.org/
Ссылки
MISC (http://www.rdancer.org/vulnerablevim.html): http://www.rdancer.org/vulnerablevim.html
MLIST ([oss-security] 20080715 Re: Re: More arbitrary code executions in Netrw): http://www.openwall.com/lists/oss-security/2008/07/15/4
CONFIRM (https://bugzilla.redhat.com/show_bug.cgi?id=467432): https://bugzilla.redhat.com/show_bug.cgi?id=467432
BID (32463): http://www.securityfocus.com/bid/32463
REDHAT (RHSA-2008:0580): http://www.redhat.com/support/errata/RHSA-2008-0580.html
MLIST ([oss-security] 20081020 CVE request (vim)): http://www.openwall.com/lists/oss-security/2008/10/20/2
MLIST ([oss-security] 20081015 Vim CVE issues cleanup (plugins tar.vim, zip.vim) - CVE-2008-3074 and CVE-2008-3075): http://www.openwall.com/lists/oss-security/2008/10/15/1
MLIST ([oss-security] 20080731 Re: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10): http://www.openwall.com/lists/oss-security/2008/08/01/1
MLIST ([oss-security] 20080713 Re: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10): http://www.openwall.com/lists/oss-security/2008/07/13/1
MLIST ([oss-security] 20080710 Re: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10): http://www.openwall.com/lists/oss-security/2008/07/10/7
MLIST ([oss-security] 20080708 Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10): http://www.openwall.com/lists/oss-security/2008/07/08/12
MLIST ([oss-security] 20080707 Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10): http://www.openwall.com/lists/oss-security/2008/07/07/4
MLIST ([oss-security] 20080707 Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10): http://www.openwall.com/lists/oss-security/2008/07/07/1
MANDRIVA (MDVSA-2008:236): http://www.mandriva.com/security/advisories?name=MDVSA-2008:236
CONFIRM (http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0324): http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0324
BUGTRAQ (20080701 Re: Collection of Vulnerabilities in Fully Patched Vim 7.1): http://marc.info/?l=bugtraq&m=121494431426308&w=2
SUSE (SUSE-SR:2009:007): http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html
CONFIRM (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506919): http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506919
MLIST ([oss-security] 20080715 Re: Re: More arbitrary code executions in Netrw): http://www.openwall.com/lists/oss-security/2008/07/15/4
CONFIRM (https://bugzilla.redhat.com/show_bug.cgi?id=467432): https://bugzilla.redhat.com/show_bug.cgi?id=467432
BID (32463): http://www.securityfocus.com/bid/32463
REDHAT (RHSA-2008:0580): http://www.redhat.com/support/errata/RHSA-2008-0580.html
MLIST ([oss-security] 20081020 CVE request (vim)): http://www.openwall.com/lists/oss-security/2008/10/20/2
MLIST ([oss-security] 20081015 Vim CVE issues cleanup (plugins tar.vim, zip.vim) - CVE-2008-3074 and CVE-2008-3075): http://www.openwall.com/lists/oss-security/2008/10/15/1
MLIST ([oss-security] 20080731 Re: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10): http://www.openwall.com/lists/oss-security/2008/08/01/1
MLIST ([oss-security] 20080713 Re: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10): http://www.openwall.com/lists/oss-security/2008/07/13/1
MLIST ([oss-security] 20080710 Re: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10): http://www.openwall.com/lists/oss-security/2008/07/10/7
MLIST ([oss-security] 20080708 Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10): http://www.openwall.com/lists/oss-security/2008/07/08/12
MLIST ([oss-security] 20080707 Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10): http://www.openwall.com/lists/oss-security/2008/07/07/4
MLIST ([oss-security] 20080707 Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10): http://www.openwall.com/lists/oss-security/2008/07/07/1
MANDRIVA (MDVSA-2008:236): http://www.mandriva.com/security/advisories?name=MDVSA-2008:236
CONFIRM (http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0324): http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0324
BUGTRAQ (20080701 Re: Collection of Vulnerabilities in Fully Patched Vim 7.1): http://marc.info/?l=bugtraq&m=121494431426308&w=2
SUSE (SUSE-SR:2009:007): http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html
CONFIRM (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506919): http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506919
