CVE-2004-1138 - VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file contai

CVE-2004-1138

Summary

VIM before 6.3 and gVim before 6.3 allow local users to execute arbitrary commands via a file containing a crafted modeline that is executed when the file is viewed using options such as (1) termcap, (2) printdevice, (3) titleold, (4) filetype, (5) syntax, (6) backupext, (7) keymap, (8) patchmode, or (9) langmenu.

References

Vulnerable Configurations

cpe:2.3:a:vim_development_group:vim:5.0:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:5.0:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:5.1:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:5.1:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:5.2:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:5.2:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:5.3:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:5.3:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:5.4:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:5.4:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:5.5:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:5.5:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:5.6:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:5.6:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:5.7:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:5.7:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:5.8:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:5.8:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:6.0:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:6.0:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:6.1:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:6.1:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:6.2:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:6.2:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:6.3.011:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:6.3.011:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:6.3.025:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:6.3.025:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:6.3.030:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:6.3.030:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:6.3.044:*:*:*:*:*:*:*
cpe:2.3:a:vim_development_group:vim:6.3.044:*:*:*:*:*:*:*

CVSS

Base:	7.2 (as of 11-10-2017 - 01:29)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:L/AC:L/Au:N/C:C/I:C/A:C

oval via4

accepted

2013-04-29T04:20:21.620-04:00

class

vulnerability

contributors

name Aharon Chernin
organization SCAP.com, LLC
name Dragos Prisaca
organization G2, Inc.

definition_extensions

comment The operating system installed on the system is Red Hat Enterprise Linux 3
oval oval:org.mitre.oval:def:11782
comment CentOS Linux 3.x
oval oval:org.mitre.oval:def:16651
comment The operating system installed on the system is Red Hat Enterprise Linux 4
oval oval:org.mitre.oval:def:11831
comment CentOS Linux 4.x
oval oval:org.mitre.oval:def:16636
comment Oracle Linux 4.x
oval oval:org.mitre.oval:def:15990

description

family

unix

oval:org.mitre.oval:def:9571

status

accepted

submitted

2010-07-09T03:56:16-04:00

title

version

redhat via4

advisories

rhsa
id RHSA-2005:010
rhsa
id RHSA-2005:036

rpms

vim-X11-1:6.3.046-0.30E.1
vim-common-1:6.3.046-0.30E.1
vim-debuginfo-1:6.3.046-0.30E.1
vim-enhanced-1:6.3.046-0.30E.1
vim-minimal-1:6.3.046-0.30E.1
vim-X11-1:6.3.046-0.40E.4
vim-common-1:6.3.046-0.40E.4
vim-debuginfo-1:6.3.046-0.40E.4
vim-enhanced-1:6.3.046-0.40E.4
vim-minimal-1:6.3.046-0.40E.4

refmap via4

fedora	FLSA:2343
gentoo	GLSA-200412-10
openpkg	OpenPKG-SA-2004.052
xf	vim-modeline-gain-privileges(18503)

Last major update

11-10-2017 - 01:29

Published

10-01-2005 - 05:00

Last modified

11-10-2017 - 01:29