Lucene search
HistorySep 18, 2001 - 4:00 a.m.
CVE-2001-0409
cve
information security
gvim
symlink attack
local users
file modification
world writable directory
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.2
Confidence
High
EPSS
0
Percentile
0.4%
vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the victim is editing the file in a world writable directory.
Affected configurations
Node
vim_development_groupvimMatch5.7
| Vendor | Product | Version | CPE |
|---|---|---|---|
| vim_development_group | vim | 5.7 | cpe:/a:vim_development_group:vim:5.7::: |
Related
cvelist
cvelist
CVE-2001-0409
2001-09-18 04:00:00
nvd
nvd
CVE-2001-0409
2001-06-18 04:00:00
suse
suse
local privilege escalation in vim/gvim
2001-04-10 15:23:00
CVSS2
2.1
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.2
Confidence
High
EPSS
0
Percentile
0.4%
Related for CVE-2001-0409