2017-10-16 12:31:07 -04:00
{
2019-03-17 23:25:59 +00:00
"CVE_data_meta" : {
"ASSIGNER" : "cve@mitre.org" ,
"ID" : "CVE-2008-4101" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"product" : {
"product_data" : [
{
"product_name" : "n/a" ,
"version" : {
"version_data" : [
{
"version_value" : "n/a"
}
]
}
}
]
} ,
"vendor_name" : "n/a"
}
2017-10-16 12:31:07 -04:00
]
2019-03-17 23:25:59 +00:00
}
} ,
"data_format" : "MITRE" ,
"data_type" : "CVE" ,
"data_version" : "4.0" ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
"value" : "Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a \";\" (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) \"Ctrl-]\" (control close-square-bracket) or (3) \"g]\" (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712."
}
]
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "n/a"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"name" : "http://www.vmware.com/security/advisories/VMSA-2009-0004.html" ,
"refsource" : "CONFIRM" ,
"url" : "http://www.vmware.com/security/advisories/VMSA-2009-0004.html"
} ,
{
"name" : "[vim-dev] 20080903 Patch 7.2.010" ,
"refsource" : "MLIST" ,
"url" : "http://ftp.vim.org/pub/vim/patches/7.2/7.2.010"
} ,
{
"name" : "RHSA-2008:0618" ,
"refsource" : "REDHAT" ,
"url" : "http://www.redhat.com/support/errata/RHSA-2008-0618.html"
} ,
{
"name" : "[oss-security] 20080915 Re: [oss-list] CVE request (vim)" ,
"refsource" : "MLIST" ,
"url" : "http://www.openwall.com/lists/oss-security/2008/09/16/5"
} ,
{
"name" : "31592" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/31592"
} ,
{
"name" : "20080825 RE: Arbitrary Code Execution in Commands: K, Control-], g]" ,
"refsource" : "BUGTRAQ" ,
"url" : "http://www.securityfocus.com/archive/1/495703"
} ,
{
"name" : "USN-712-1" ,
"refsource" : "UBUNTU" ,
"url" : "http://www.ubuntu.com/usn/USN-712-1"
} ,
{
"name" : "[oss-security] 20080911 Re: [oss-list] CVE request (vim)" ,
"refsource" : "MLIST" ,
"url" : "http://www.openwall.com/lists/oss-security/2008/09/11/4"
} ,
{
"name" : "oval:org.mitre.oval:def:10894" ,
"refsource" : "OVAL" ,
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10894"
} ,
{
"name" : "31681" ,
"refsource" : "BID" ,
"url" : "http://www.securityfocus.com/bid/31681"
} ,
{
"name" : "[oss-security] 20080915 Re: [oss-list] CVE request (vim)" ,
"refsource" : "MLIST" ,
"url" : "http://www.openwall.com/lists/oss-security/2008/09/16/6"
} ,
{
"name" : "32858" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/32858"
} ,
{
"name" : "33410" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/33410"
} ,
{
"name" : "APPLE-SA-2010-03-29-1" ,
"refsource" : "APPLE" ,
"url" : "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html"
} ,
{
"name" : "RHSA-2008:0580" ,
"refsource" : "REDHAT" ,
"url" : "http://www.redhat.com/support/errata/RHSA-2008-0580.html"
} ,
{
"name" : "http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm" ,
"refsource" : "CONFIRM" ,
"url" : "http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm"
} ,
{
"name" : "vim-normal-command-execution(44626)" ,
"refsource" : "XF" ,
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/44626"
} ,
{
"name" : "ADV-2009-0904" ,
"refsource" : "VUPEN" ,
"url" : "http://www.vupen.com/english/advisories/2009/0904"
} ,
{
"name" : "ADV-2009-0033" ,
"refsource" : "VUPEN" ,
"url" : "http://www.vupen.com/english/advisories/2009/0033"
} ,
{
"name" : "20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim" ,
"refsource" : "BUGTRAQ" ,
"url" : "http://www.securityfocus.com/archive/1/502322/100/0/threaded"
} ,
{
"name" : "http://groups.google.com/group/vim_dev/attach/dd32ad3a84f36bb2/K-arbitrary-command-execution.patch?part=2" ,
"refsource" : "MISC" ,
"url" : "http://groups.google.com/group/vim_dev/attach/dd32ad3a84f36bb2/K-arbitrary-command-execution.patch?part=2"
} ,
{
"name" : "https://bugzilla.redhat.com/show_bug.cgi?id=461927" ,
"refsource" : "CONFIRM" ,
"url" : "https://bugzilla.redhat.com/show_bug.cgi?id=461927"
} ,
{
"name" : "http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm" ,
"refsource" : "CONFIRM" ,
"url" : "http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm"
} ,
{
"name" : "32222" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/32222"
} ,
{
"name" : "http://support.apple.com/kb/HT4077" ,
"refsource" : "CONFIRM" ,
"url" : "http://support.apple.com/kb/HT4077"
} ,
{
"name" : "30795" ,
"refsource" : "BID" ,
"url" : "http://www.securityfocus.com/bid/30795"
} ,
{
"name" : "oval:org.mitre.oval:def:5812" ,
"refsource" : "OVAL" ,
"url" : "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5812"
} ,
{
"name" : "http://groups.google.com/group/vim_dev/attach/9290f26f9bc11b33/K-arbitrary-command-execution.patch.v3?part=2" ,
"refsource" : "MISC" ,
"url" : "http://groups.google.com/group/vim_dev/attach/9290f26f9bc11b33/K-arbitrary-command-execution.patch.v3?part=2"
} ,
{
"name" : "[oss-security] 20080911 [oss-list] CVE request (vim)" ,
"refsource" : "MLIST" ,
"url" : "http://www.openwall.com/lists/oss-security/2008/09/11/3"
} ,
{
"name" : "20080822 Vim: Arbitrary Code Execution in Commands: K, Control-], g]" ,
"refsource" : "BUGTRAQ" ,
"url" : "http://www.securityfocus.com/archive/1/495662"
} ,
{
"name" : "MDVSA-2008:236" ,
"refsource" : "MANDRIVA" ,
"url" : "http://www.mandriva.com/security/advisories?name=MDVSA-2008:236"
} ,
{
"name" : "ADV-2008-2780" ,
"refsource" : "VUPEN" ,
"url" : "http://www.vupen.com/english/advisories/2008/2780"
} ,
{
"name" : "32864" ,
"refsource" : "SECUNIA" ,
"url" : "http://secunia.com/advisories/32864"
} ,
{
"name" : "[vim_dev] 20080824 Bug with v_K and potentially K command" ,
"refsource" : "MLIST" ,
"url" : "http://groups.google.com/group/vim_dev/msg/9290f26f9bc11b33"
} ,
{
"name" : "http://www.rdancer.org/vulnerablevim-K.html" ,
"refsource" : "MISC" ,
"url" : "http://www.rdancer.org/vulnerablevim-K.html"
} ,
{
"name" : "APPLE-SA-2008-10-09" ,
"refsource" : "APPLE" ,
"url" : "http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html"
} ,
{
"name" : "http://support.apple.com/kb/HT3216" ,
"refsource" : "CONFIRM" ,
"url" : "http://support.apple.com/kb/HT3216"
} ,
{
"name" : "http://groups.google.com/group/vim_dev/browse_thread/thread/1434d0812b5c817e/6ad2d5b50a96668e" ,
"refsource" : "MISC" ,
"url" : "http://groups.google.com/group/vim_dev/browse_thread/thread/1434d0812b5c817e/6ad2d5b50a96668e"
} ,
{
"name" : "RHSA-2008:0617" ,
"refsource" : "REDHAT" ,
"url" : "http://www.redhat.com/support/errata/RHSA-2008-0617.html"
}
]
}
}
