CVE

Id
5761  
CVE No.
CVE-2002-1377  
Status
Entry  
Description
vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the libcall feature in modelines, which are not sandboxed but may be executed when vim is used to edit a malicious file, as demonstrated using mutt.  
Phase
 
Votes
 
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
32190 5761 CVE-2002-1377 FULLDISC:20021213 Some vim problems, yet still vim much better than windows  View
32191 5761 CVE-2002-1377 URL:http://lists.grok.org.uk/pipermail/full-disclosure/2002-December/002948.html  View
32192 5761 CVE-2002-1377 MISC:http://www.guninski.com/vim1.html  View
32193 5761 CVE-2002-1377 BUGTRAQ:20040331 OpenLinux: vim arbitrary commands execution through modelines  View
32194 5761 CVE-2002-1377 URL:http://marc.info/?l=bugtraq&m=108077992208690&w=2  View
32195 5761 CVE-2002-1377 CONECTIVA:CLA-2004:812  View
32196 5761 CVE-2002-1377 URL:http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000812  View
32197 5761 CVE-2002-1377 MANDRAKE:MDKSA-2003:012  View
32198 5761 CVE-2002-1377 URL:http://www.mandrakesoft.com/security/advisories?name=MDKSA-2003:012  View
32199 5761 CVE-2002-1377 REDHAT:RHSA-2002:297  View
32200 5761 CVE-2002-1377 URL:http://www.redhat.com/support/errata/RHSA-2002-297.html  View
32201 5761 CVE-2002-1377 REDHAT:RHSA-2002:302  View
32202 5761 CVE-2002-1377 URL:http://www.redhat.com/support/errata/RHSA-2002-302.html  View
32203 5761 CVE-2002-1377 SUNALERT:55700  View
32204 5761 CVE-2002-1377 URL:http://sunsolve.sun.com/pub-cgi/retrieve.pl?doc=fsalert/55700  View
32205 5761 CVE-2002-1377 BID:6384  View
32206 5761 CVE-2002-1377 URL:http://www.securityfocus.com/bid/6384  View
32207 5761 CVE-2002-1377 XF:vim-modeline-command-execution(10835)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63993 JVNDB-2002-000320 Vim における Modeline の取扱い不備によるコマンド実行の脆弱性 オープンソーステキストエディタである vim (Vi Improved) において、 modeline の取り扱いに不備があり、悪意のあるファイルを作成し、そのファイルを vim で読み込ませることにより、任意のコマンドを実行される脆弱性が存在します。 CVE-2002-1377 5761 4.6 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000320.html  View