PT-2008-5404 · Vim+1 · Vim+1

Ben Schmidt + 1 · Published 2008-09-18 · Updated 2018-10-11 · CVE-2008-4101

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Vim versions 3.0 through 7.x before 7.2.010

Description The issue allows user-assisted attackers to execute arbitrary shell commands or Ex commands by exploiting improper character escaping. This can be achieved by entering specific keystrokes on a line containing certain characters, such as a semicolon followed by a command, or by using keystroke sequences like Ctrl-] or g] with an argument.

Recommendations For Vim versions 3.0 through 7.x before 7.2.010, update to version 7.2.010 or later to resolve the issue.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-4101

DSA-1733-1

RHSA-2008:0580

RHSA-2008:0617

RHSA-2008:0618

RHSA-2008_0580

RHSA-2008_0617

Affected Products

Red Hat

Vim

References · 59

• 🔥 http://groups.google.com/group/vim_dev/browse_thread/thread/1434d0812b5c817e/6ad2d5b50a96668e · Exploit
• 🔥 http://ftp.vim.org/pub/vim/patches/7.2/7.2.010 · Exploit
• 🔥 https://exploit-db.com/exploits/32289 · Exploit
• http://lists.apple.com/archives/security-announce/2010//Mar/msg00001.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0580.html · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0617.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2008-4101 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2008-4101 · Vendor Advisory
• http://redhat.com/support/errata/RHSA-2008-0618.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2008-4101 · Vendor Advisory
• http://groups.google.com/group/vim_dev/msg/9290f26f9bc11b33 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2008-4101 · Security Note
• http://ubuntu.com/usn/USN-712-1 · Vendor Advisory
• http://groups.google.com/group/vim_dev/attach/dd32ad3a84f36bb2/K-arbitrary-command-execution.patch?part=2 · Patch
• http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html · Vendor Advisory