CVE-2005-0069

2005-01-1305:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2005-0069

tcltags

vimspell.sh

vim 6.3

symlink attack

security vulnerability

nvd

6.2 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.3%

JSON

The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files.

CPENameOperatorVersion
vim_development_group:vimvim development group vimeq6.3.011
vim_development_group:vimvim development group vimeq6.3.025
vim_development_group:vimvim development group vimeq6.3.044
vim_development_group:vimvim development group vimeq6.3.030

CPE	Name	Operator	Version
vim_development_group:vim	vim development group vim	eq	6.3.011
vim_development_group:vim	vim development group vim	eq	6.3.025
vim_development_group:vim	vim development group vim	eq	6.3.044
vim_development_group:vim	vim development group vim	eq	6.3.030