Lucene search

MitreCVE-2008-3294

HistoryJul 24, 2008 - 6:41 p.m.

CVE-2008-3294

2008-07-2418:41:00

CWE-94

mitre

web.nvd.nist.gov

vim

configure.in

python support

arbitrary code execution

cve-2008-3294

nvd

CVSS2

3.7

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

AI Score

7.1

Confidence

Low

EPSS

Percentile

5.1%

JSON

src/configure.in in Vim 5.0 through 7.1, when used for a build with Python support, does not ensure that the Makefile-conf temporary file has the intended ownership and permissions, which allows local users to execute arbitrary code by modifying this file during a time window, or by creating it ahead of time with permissions that prevent its modification by configure.

Affected configurations

Nvd

Node

vimvimMatch5.0

vimvimMatch5.1

vimvimMatch5.2

vimvimMatch5.3

vimvimMatch5.4

vimvimMatch5.5

vimvimMatch5.6

vimvimMatch5.7

vimvimMatch5.8

vimvimMatch6.0

vimvimMatch6.1

vimvimMatch6.2

vimvimMatch6.3

vimvimMatch6.4

vimvimMatch7.0

vimvimMatch7.1

VendorProductVersionCPE
vimvim5.0cpe:2.3:a:vim:vim:5.0:*:*:*:*:*:*:*
vimvim5.1cpe:2.3:a:vim:vim:5.1:*:*:*:*:*:*:*
vimvim5.2cpe:2.3:a:vim:vim:5.2:*:*:*:*:*:*:*
vimvim5.3cpe:2.3:a:vim:vim:5.3:*:*:*:*:*:*:*
vimvim5.4cpe:2.3:a:vim:vim:5.4:*:*:*:*:*:*:*
vimvim5.5cpe:2.3:a:vim:vim:5.5:*:*:*:*:*:*:*
vimvim5.6cpe:2.3:a:vim:vim:5.6:*:*:*:*:*:*:*
vimvim5.7cpe:2.3:a:vim:vim:5.7:*:*:*:*:*:*:*
vimvim5.8cpe:2.3:a:vim:vim:5.8:*:*:*:*:*:*:*
vimvim6.0cpe:2.3:a:vim:vim:6.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
vim	vim	5.0	cpe:2.3:a:vim:vim:5.0:::::::*
vim	vim	5.1	cpe:2.3:a:vim:vim:5.1:::::::*
vim	vim	5.2	cpe:2.3:a:vim:vim:5.2:::::::*
vim	vim	5.3	cpe:2.3:a:vim:vim:5.3:::::::*
vim	vim	5.4	cpe:2.3:a:vim:vim:5.4:::::::*
vim	vim	5.5	cpe:2.3:a:vim:vim:5.5:::::::*
vim	vim	5.6	cpe:2.3:a:vim:vim:5.6:::::::*
vim	vim	5.7	cpe:2.3:a:vim:vim:5.7:::::::*
vim	vim	5.8	cpe:2.3:a:vim:vim:5.8:::::::*
vim	vim	6.0	cpe:2.3:a:vim:vim:6.0:::::::*