mirror of
https://github.com/CVEProject/cvelist.git
synced 2025-07-30 18:04:30 +00:00
252 lines
10 KiB
JSON
252 lines
10 KiB
JSON
{
|
|
"CVE_data_meta": {
|
|
"ASSIGNER": "cve@mitre.org",
|
|
"ID": "CVE-2008-4101",
|
|
"STATE": "PUBLIC"
|
|
},
|
|
"affects": {
|
|
"vendor": {
|
|
"vendor_data": [
|
|
{
|
|
"product": {
|
|
"product_data": [
|
|
{
|
|
"product_name": "n/a",
|
|
"version": {
|
|
"version_data": [
|
|
{
|
|
"version_value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
}
|
|
]
|
|
},
|
|
"vendor_name": "n/a"
|
|
}
|
|
]
|
|
}
|
|
},
|
|
"data_format": "MITRE",
|
|
"data_type": "CVE",
|
|
"data_version": "4.0",
|
|
"description": {
|
|
"description_data": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a \";\" (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) \"Ctrl-]\" (control close-square-bracket) or (3) \"g]\" (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712."
|
|
}
|
|
]
|
|
},
|
|
"problemtype": {
|
|
"problemtype_data": [
|
|
{
|
|
"description": [
|
|
{
|
|
"lang": "eng",
|
|
"value": "n/a"
|
|
}
|
|
]
|
|
}
|
|
]
|
|
},
|
|
"references": {
|
|
"reference_data": [
|
|
{
|
|
"name": "http://www.vmware.com/security/advisories/VMSA-2009-0004.html",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://www.vmware.com/security/advisories/VMSA-2009-0004.html"
|
|
},
|
|
{
|
|
"name": "[vim-dev] 20080903 Patch 7.2.010",
|
|
"refsource": "MLIST",
|
|
"url": "http://ftp.vim.org/pub/vim/patches/7.2/7.2.010"
|
|
},
|
|
{
|
|
"name": "RHSA-2008:0618",
|
|
"refsource": "REDHAT",
|
|
"url": "http://www.redhat.com/support/errata/RHSA-2008-0618.html"
|
|
},
|
|
{
|
|
"name": "[oss-security] 20080915 Re: [oss-list] CVE request (vim)",
|
|
"refsource": "MLIST",
|
|
"url": "http://www.openwall.com/lists/oss-security/2008/09/16/5"
|
|
},
|
|
{
|
|
"name": "31592",
|
|
"refsource": "SECUNIA",
|
|
"url": "http://secunia.com/advisories/31592"
|
|
},
|
|
{
|
|
"name": "20080825 RE: Arbitrary Code Execution in Commands: K, Control-], g]",
|
|
"refsource": "BUGTRAQ",
|
|
"url": "http://www.securityfocus.com/archive/1/495703"
|
|
},
|
|
{
|
|
"name": "USN-712-1",
|
|
"refsource": "UBUNTU",
|
|
"url": "http://www.ubuntu.com/usn/USN-712-1"
|
|
},
|
|
{
|
|
"name": "[oss-security] 20080911 Re: [oss-list] CVE request (vim)",
|
|
"refsource": "MLIST",
|
|
"url": "http://www.openwall.com/lists/oss-security/2008/09/11/4"
|
|
},
|
|
{
|
|
"name": "oval:org.mitre.oval:def:10894",
|
|
"refsource": "OVAL",
|
|
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10894"
|
|
},
|
|
{
|
|
"name": "31681",
|
|
"refsource": "BID",
|
|
"url": "http://www.securityfocus.com/bid/31681"
|
|
},
|
|
{
|
|
"name": "[oss-security] 20080915 Re: [oss-list] CVE request (vim)",
|
|
"refsource": "MLIST",
|
|
"url": "http://www.openwall.com/lists/oss-security/2008/09/16/6"
|
|
},
|
|
{
|
|
"name": "32858",
|
|
"refsource": "SECUNIA",
|
|
"url": "http://secunia.com/advisories/32858"
|
|
},
|
|
{
|
|
"name": "33410",
|
|
"refsource": "SECUNIA",
|
|
"url": "http://secunia.com/advisories/33410"
|
|
},
|
|
{
|
|
"name": "APPLE-SA-2010-03-29-1",
|
|
"refsource": "APPLE",
|
|
"url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html"
|
|
},
|
|
{
|
|
"name": "RHSA-2008:0580",
|
|
"refsource": "REDHAT",
|
|
"url": "http://www.redhat.com/support/errata/RHSA-2008-0580.html"
|
|
},
|
|
{
|
|
"name": "http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm"
|
|
},
|
|
{
|
|
"name": "vim-normal-command-execution(44626)",
|
|
"refsource": "XF",
|
|
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/44626"
|
|
},
|
|
{
|
|
"name": "ADV-2009-0904",
|
|
"refsource": "VUPEN",
|
|
"url": "http://www.vupen.com/english/advisories/2009/0904"
|
|
},
|
|
{
|
|
"name": "ADV-2009-0033",
|
|
"refsource": "VUPEN",
|
|
"url": "http://www.vupen.com/english/advisories/2009/0033"
|
|
},
|
|
{
|
|
"name": "20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim",
|
|
"refsource": "BUGTRAQ",
|
|
"url": "http://www.securityfocus.com/archive/1/502322/100/0/threaded"
|
|
},
|
|
{
|
|
"name": "http://groups.google.com/group/vim_dev/attach/dd32ad3a84f36bb2/K-arbitrary-command-execution.patch?part=2",
|
|
"refsource": "MISC",
|
|
"url": "http://groups.google.com/group/vim_dev/attach/dd32ad3a84f36bb2/K-arbitrary-command-execution.patch?part=2"
|
|
},
|
|
{
|
|
"name": "https://bugzilla.redhat.com/show_bug.cgi?id=461927",
|
|
"refsource": "CONFIRM",
|
|
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=461927"
|
|
},
|
|
{
|
|
"name": "http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://support.avaya.com/elmodocs2/security/ASA-2008-457.htm"
|
|
},
|
|
{
|
|
"name": "32222",
|
|
"refsource": "SECUNIA",
|
|
"url": "http://secunia.com/advisories/32222"
|
|
},
|
|
{
|
|
"name": "http://support.apple.com/kb/HT4077",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://support.apple.com/kb/HT4077"
|
|
},
|
|
{
|
|
"name": "30795",
|
|
"refsource": "BID",
|
|
"url": "http://www.securityfocus.com/bid/30795"
|
|
},
|
|
{
|
|
"name": "oval:org.mitre.oval:def:5812",
|
|
"refsource": "OVAL",
|
|
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5812"
|
|
},
|
|
{
|
|
"name": "http://groups.google.com/group/vim_dev/attach/9290f26f9bc11b33/K-arbitrary-command-execution.patch.v3?part=2",
|
|
"refsource": "MISC",
|
|
"url": "http://groups.google.com/group/vim_dev/attach/9290f26f9bc11b33/K-arbitrary-command-execution.patch.v3?part=2"
|
|
},
|
|
{
|
|
"name": "[oss-security] 20080911 [oss-list] CVE request (vim)",
|
|
"refsource": "MLIST",
|
|
"url": "http://www.openwall.com/lists/oss-security/2008/09/11/3"
|
|
},
|
|
{
|
|
"name": "20080822 Vim: Arbitrary Code Execution in Commands: K, Control-], g]",
|
|
"refsource": "BUGTRAQ",
|
|
"url": "http://www.securityfocus.com/archive/1/495662"
|
|
},
|
|
{
|
|
"name": "MDVSA-2008:236",
|
|
"refsource": "MANDRIVA",
|
|
"url": "http://www.mandriva.com/security/advisories?name=MDVSA-2008:236"
|
|
},
|
|
{
|
|
"name": "ADV-2008-2780",
|
|
"refsource": "VUPEN",
|
|
"url": "http://www.vupen.com/english/advisories/2008/2780"
|
|
},
|
|
{
|
|
"name": "32864",
|
|
"refsource": "SECUNIA",
|
|
"url": "http://secunia.com/advisories/32864"
|
|
},
|
|
{
|
|
"name": "[vim_dev] 20080824 Bug with v_K and potentially K command",
|
|
"refsource": "MLIST",
|
|
"url": "http://groups.google.com/group/vim_dev/msg/9290f26f9bc11b33"
|
|
},
|
|
{
|
|
"name": "http://www.rdancer.org/vulnerablevim-K.html",
|
|
"refsource": "MISC",
|
|
"url": "http://www.rdancer.org/vulnerablevim-K.html"
|
|
},
|
|
{
|
|
"name": "APPLE-SA-2008-10-09",
|
|
"refsource": "APPLE",
|
|
"url": "http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html"
|
|
},
|
|
{
|
|
"name": "http://support.apple.com/kb/HT3216",
|
|
"refsource": "CONFIRM",
|
|
"url": "http://support.apple.com/kb/HT3216"
|
|
},
|
|
{
|
|
"name": "http://groups.google.com/group/vim_dev/browse_thread/thread/1434d0812b5c817e/6ad2d5b50a96668e",
|
|
"refsource": "MISC",
|
|
"url": "http://groups.google.com/group/vim_dev/browse_thread/thread/1434d0812b5c817e/6ad2d5b50a96668e"
|
|
},
|
|
{
|
|
"name": "RHSA-2008:0617",
|
|
"refsource": "REDHAT",
|
|
"url": "http://www.redhat.com/support/errata/RHSA-2008-0617.html"
|
|
}
|
|
]
|
|
}
|
|
} |