CVE

Id
33549  
CVE No.
CVE-2008-3432  
Status
Candidate  
Description
Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case.  
Phase
Assigned (20080731)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
365251 33549 CVE-2008-3432 BUGTRAQ:20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim  View
365252 33549 CVE-2008-3432 URL:http://www.securityfocus.com/archive/1/archive/1/502322/100/0/threaded  View
365253 33549 CVE-2008-3432 MLIST:[oss-security] 20080715 Re: Re: More arbitrary code executions in Netrw  View
365254 33549 CVE-2008-3432 URL:http://www.openwall.com/lists/oss-security/2008/07/15/4  View
365255 33549 CVE-2008-3432 MLIST:[oss-security] 20080731 Re: Re: More arbitrary code executions in Netrw  View
365256 33549 CVE-2008-3432 URL:http://www.openwall.com/lists/oss-security/2008/08/01/1  View
365257 33549 CVE-2008-3432 CONFIRM:ftp://ftp.vim.org/pub/vim/patches/6.2.429  View
365258 33549 CVE-2008-3432 CONFIRM:ftp://ftp.vim.org/pub/vim/patches/6.3/6.3.059  View
365259 33549 CVE-2008-3432 CONFIRM:http://support.apple.com/kb/HT3216  View
365260 33549 CVE-2008-3432 CONFIRM:http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm  View
365261 33549 CVE-2008-3432 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=455455  View
365262 33549 CVE-2008-3432 CONFIRM:http://www.vmware.com/security/advisories/VMSA-2009-0004.html  View
365263 33549 CVE-2008-3432 APPLE:APPLE-SA-2008-10-09  View
365264 33549 CVE-2008-3432 URL:http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html  View
365265 33549 CVE-2008-3432 REDHAT:RHSA-2008:0617  View
365266 33549 CVE-2008-3432 URL:http://www.redhat.com/support/errata/RHSA-2008-0617.html  View
365267 33549 CVE-2008-3432 BID:30648  View
365268 33549 CVE-2008-3432 URL:http://www.securityfocus.com/bid/30648  View
365269 33549 CVE-2008-3432 BID:31681  View
365270 33549 CVE-2008-3432 URL:http://www.securityfocus.com/bid/31681  View
365271 33549 CVE-2008-3432 OVAL:oval:org.mitre.oval:def:11203  View
365272 33549 CVE-2008-3432 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11203  View
365273 33549 CVE-2008-3432 OVAL:oval:org.mitre.oval:def:5987  View
365274 33549 CVE-2008-3432 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5987  View
365275 33549 CVE-2008-3432 SECUNIA:32858  View
365276 33549 CVE-2008-3432 URL:http://secunia.com/advisories/32858  View
365277 33549 CVE-2008-3432 VUPEN:ADV-2008-2780  View
365278 33549 CVE-2008-3432 URL:http://www.vupen.com/english/advisories/2008/2780  View
365279 33549 CVE-2008-3432 VUPEN:ADV-2009-0033  View
365280 33549 CVE-2008-3432 URL:http://www.vupen.com/english/advisories/2009/0033  View
365281 33549 CVE-2008-3432 SECUNIA:32222  View
365282 33549 CVE-2008-3432 URL:http://secunia.com/advisories/32222  View
365283 33549 CVE-2008-3432 SECUNIA:33410  View
365284 33549 CVE-2008-3432 URL:http://secunia.com/advisories/33410  View
365285 33549 CVE-2008-3432 VUPEN:ADV-2009-0904  View
365286 33549 CVE-2008-3432 URL:http://www.vupen.com/english/advisories/2009/0904  View
365287 33549 CVE-2008-3432 XF:vim-mchexpandwildcards-bo(44722)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
49397 JVNDB-2008-004707 Notepad++ の GUP 標準アップデートプロセスにおける任意のコードを実行される脆弱性 Notepad++ の GUP 標準アップデートプロセスは、アップデートの信頼性を適切に検証しないため、任意のコードを実行される脆弱性が存在します。 CVE-2008-3436 33549 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004707.html  View