NVD

Id
80330  
Name
CVE-2002-1377  
Description
vim 6.0 and 6.1, and possibly other versions, allows attackers to execute arbitrary commands using the libcall feature in modelines, which are not sandboxed but may be executed when vim is used to edit a malicious file, as demonstrated using mutt.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-05  
Published
2002-12-23  
Modified Date
2016-10-17  
Seq
2002-1377  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
400617 80330 CVE-2002-1377 CLA-2004:812  View
400618 80330 CVE-2002-1377 20021213 Some vim problems, yet still vim much better than windows  View
400619 80330 CVE-2002-1377 20040331 OpenLinux: vim arbitrary commands execution through modelines  View
400620 80330 CVE-2002-1377 55700  View
400621 80330 CVE-2002-1377 http://www.guninski.com/vim1.html  View
400622 80330 CVE-2002-1377 MDKSA-2003:012  View
400623 80330 CVE-2002-1377 RHSA-2002:297  View
400624 80330 CVE-2002-1377 RHSA-2002:302  View
400625 80330 CVE-2002-1377 6384  View
400626 80330 CVE-2002-1377 vim-modeline-command-execution(10835)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63993 JVNDB-2002-000320 Vim における Modeline の取扱い不備によるコマンド実行の脆弱性 オープンソーステキストエディタである vim (Vi Improved) において、 modeline の取り扱いに不備があり、悪意のあるファイルを作成し、そのファイルを vim で読み込ませることにより、任意のコマンドを実行される脆弱性が存在します。 CVE-2002-1377 5761 CVE-2002-1377 80330 4.6 http://jvndb.jvn.jp/ja/contents/2002/JVNDB-2002-000320.html 2002-12-12 2007-04-01 View