NVD

Id
3313  
Name
CVE-2008-3432  
Description
Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-10-10  
Modified Date
2012-10-30  
Seq
2008-3432  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
20862 3313 CVE-2008-3432 ftp://ftp.vim.org/pub/vim/patches/6.2.429  View
20863 3313 CVE-2008-3432 ftp://ftp.vim.org/pub/vim/patches/6.3/6.3.059  View
20864 3313 CVE-2008-3432 APPLE-SA-2008-10-09  View
20865 3313 CVE-2008-3432 oval:org.mitre.oval:def:11203  View
20866 3313 CVE-2008-3432 oval:org.mitre.oval:def:5987  View
20867 3313 CVE-2008-3432 http://support.apple.com/kb/HT3216  View
20868 3313 CVE-2008-3432 http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm  View
20869 3313 CVE-2008-3432 [oss-security] 20080715 Re: Re: More arbitrary code executions in Netrw  View
20870 3313 CVE-2008-3432 [oss-security] 20080731 Re: Re: More arbitrary code executions in Netrw  View
20871 3313 CVE-2008-3432 RHSA-2008:0617  View
20872 3313 CVE-2008-3432 20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim  View
20873 3313 CVE-2008-3432 30648  View
20874 3313 CVE-2008-3432 31681  View
20875 3313 CVE-2008-3432 http://www.vmware.com/security/advisories/VMSA-2009-0004.html  View
20876 3313 CVE-2008-3432 ADV-2008-2780  View
20877 3313 CVE-2008-3432 ADV-2009-0033  View
20878 3313 CVE-2008-3432 ADV-2009-0904  View
20879 3313 CVE-2008-3432 vim-mchexpandwildcards-bo(44722)  View
20880 3313 CVE-2008-3432 https://bugzilla.redhat.com/show_bug.cgi?id=455455  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46513 JVNDB-2008-001823 Vim の mch_expand_wildcards 関数におけるヒープベースのバッファオーバーフローの脆弱性 Vim の os_unix.c に実装されている mch_expand_wildcards 関数には、ファイル名内のシェルのメタキャラクタ処理に不備があるためヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-3432 33545 CVE-2008-3432 3313 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001823.html 2008-10-09 2008-12-17 View