NVD

Id
68060  
Name
CVE-2005-2368  
Description
vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2005-07-26  
Modified Date
2010-10-18  
Seq
2005-2368  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
351925 68060 CVE-2005-2368 20050725 Help poor children in Uganda  View
351926 68060 CVE-2005-2368 oval:org.mitre.oval:def:11302  View
351927 68060 CVE-2005-2368 http://www.guninski.com/where_do_you_want_billg_to_go_today_5.html  View
351928 68060 CVE-2005-2368 RHSA-2005:745  View
351929 68060 CVE-2005-2368 14374  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62245 JVNDB-2005-000447 Vim の modeline における任意のコマンドを実行される脆弱性 Vim には、modeline に記述された foldexpr オプションに指定された組み込み関数 glob()、expand() によって呼び出されるコマンドのサニタイズ処理が適切に行われない脆弱性が存在します。 CVE-2005-2368 13572 CVE-2005-2368 68060 10 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000447.html 2005-07-25 2007-04-01 View