vim security update

🗓️ 25 Nov 2008 16:56:47Reported by CentOS ProjectType

centos

centos🔗 lists.centos.org👁 68 Views

Vim security update with input sanitization and format string flaws

Reporter	Title	Published	Views	Family All 170
FreeBSD	vim -- Command Format String Vulnerability	27 Jul 200700:00	–	freebsd
FreeBSD	vim -- Vim Shell Command Injection Vulnerabilities	16 Jun 200800:00	–	freebsd
FreeBSD	vim6 -- heap-based overflow while parsing shell metacharacters	31 Jul 200800:00	–	freebsd
Tenable Nessus	CentOS 5 : vim (CESA-2008:0580)	6 Jan 201000:00	–	nessus
Tenable Nessus	CentOS 3 / 4 : vim (CESA-2008:0617)	23 Apr 200900:00	–	nessus
Tenable Nessus	Debian DSA-1364-2 : vim - several vulnerabilities	3 Sep 200700:00	–	nessus
Tenable Nessus	Debian DSA-1733-1 : vim - several vulnerabilities	4 Mar 200900:00	–	nessus
Tenable Nessus	FreeBSD : vim -- Command Format String Vulnerability (1ed03222-3c65-11dc-b3d3-0016179b2dd5)	30 Jul 200700:00	–	nessus
Tenable Nessus	FreeBSD : vim -- Vim Shell Command Injection Vulnerabilities (30866e6c-3c6d-11dd-98c9-00163e000016)	24 Jun 200800:00	–	nessus
Tenable Nessus	FreeBSD : vim6 -- heap-based overflow while parsing shell metacharacters (f866d2af-bbba-11df-8a8d-0008743bf21a)	9 Sep 201000:00	–	nessus

OS	OS Version	Architecture	Package	Package Version	Filename
CentOS	3	i386	vim-common	6.3.046-0.30E.11	vim-common-6.3.046-0.30E.11.i386.rpm
CentOS	3	i386	vim-enhanced	6.3.046-0.30E.11	vim-enhanced-6.3.046-0.30E.11.i386.rpm
CentOS	3	i386	vim-minimal	6.3.046-0.30E.11	vim-minimal-6.3.046-0.30E.11.i386.rpm
CentOS	3	i386	vim-x11	6.3.046-0.30E.11	vim-X11-6.3.046-0.30E.11.i386.rpm
CentOS	3	x86_64	vim-common	6.3.046-0.30E.11	vim-common-6.3.046-0.30E.11.x86_64.rpm
CentOS	3	x86_64	vim-enhanced	6.3.046-0.30E.11	vim-enhanced-6.3.046-0.30E.11.x86_64.rpm
CentOS	3	x86_64	vim-minimal	6.3.046-0.30E.11	vim-minimal-6.3.046-0.30E.11.x86_64.rpm
CentOS	3	x86_64	vim-x11	6.3.046-0.30E.11	vim-X11-6.3.046-0.30E.11.x86_64.rpm
CentOS	3	ia64	vim-x11	6.3.046-0.30E.11	vim-X11-6.3.046-0.30E.11.ia64.rpm
CentOS	3	ia64	vim-common	6.3.046-0.30E.11	vim-common-6.3.046-0.30E.11.ia64.rpm

Source	Link
twitter	www.twitter.com/centos
steadfast	www.steadfast.net/
pasi	www.pasi.pirhonen.eu/
rhn	www.rhn.redhat.com/errata/RHSA-2008-0617.html
linkedin	www.linkedin.com/groups/22405
youtube	www.youtube.com/TheCentOSProject
facebook	www.facebook.com/groups/centosproject/
reddit	www.reddit.com/r/CentOS/
pgp	www.pgp.mit.edu:11371/pks/lookup

26 Nov 2008 22:58Current

7High risk

Vulners AI Score7

CVSS 29.3

EPSS0.22543

vim security update input sanitization format string code execution heap-based overflow cve-2008-4101 cve-2008-3432 cve-2008-2712 cve-2007-2953 centos advisory packages