CVE-2008-4677

autoload/netrw.vim aka the Netrw Plugin 109, 131, and other versions before 133k for Vim 7.1.266, other 7.1 versions, and 7.2 stores credentials for an FTP session, and sends those credentials when attempting to establish subsequent FTP sessions to servers on different hosts, which allows remote...

CVE-2008-4677

CVE-2008-4677 affects the Netrw plugin (autoload/netrw.vim) in Vim 7.1.x and 7.2-era configurations, where credentials stored for an FTP session could be disclosed to remote servers. The issue stems from the netrw plugin sending stored usernames/passwords during subsequent FTP attempts to differe...

vim -- multiple vulnerabilities in the netrw module

Jan Minar reports: Applying the D'' to a file with a crafted file name, or inside a directory with a crafted directory name, can lead to arbitrary code execution. Lack of sanitization throughout Netrw can lead to arbitrary code execution upon opening a directory with a crafted name. The Vim Netrw...

vim-ftp.txt

Vim: Netrw: FTP User Name and Password Disclosure 1. SUMMARY Product : Vim -- Vi IMproved Versions : Tested with Vim 7.1.266, 7.2, autoload/netrw.vim v131, v109 Impact : Credentials disclosure Wherefrom: Remote Original : http://www.rdancer.org/vulnerablevim-netrw-credentials-dis.html The Vim Net...

Vim: Netrw: FTP User Name and Password Disclosure

Vim: Netrw: FTP User Name and Password Disclosure 1. SUMMARY Product : Vim -- Vi IMproved Versions : Tested with Vim 7.1.266, 7.2, autoload/netrw.vim v131, v109 Impact : Credentials disclosure Wherefrom: Remote Original : http://www.rdancer.org/vulnerablevim-netrw-credentials-dis.html The Vim Net...

Arbitrary code execution in Netrw version 127, Vim 7.2b

Summary Product : Vim -- Vi IMproved, Netrw Version : Tested with Vim 7.2b, Netrw 127 Impact : Arbitrary code execution Wherefrom: Local, possibly remote Original : http://www.rdancer.org/vulnerablevim-netrw.v5.html http://www.rdancer.org/vulnerablevim-latest.tar.bz2 Lack of sanitization...

Netrw Vim脚本s:BrowserMaps()函数命令执行漏洞

BUGTRAQ ID: 30254 Netrw是一款VIM支持的远程读写文件的插件。 Netrw脚本的netrw.vim文件中没有正确地过滤某些语句： $ grep -n exe /.vim/autoload/netrw.vim|grep -v -e escape -e Decho -e executable | wc -l 239 当用户打开目录时，会使用execute命令加载键盘映射字符串，但没有过滤容纳当前目录名的b:netrwcurdir变量。在s:BrowserMaps函数中： 1709 if s:didstarstar || !mapcheck"s-up","n" 1710...

vim Netrw plugin code execution

Directory name shell characters vulnerability...

Netrw Vim Script - 's:BrowserMaps()' Command Execution

source: https://www.securityfocus.com/bid/30254/info Netrw is prone to a command-execution vulnerability because the application fails to sufficiently sanitize user-supplied data. Successfully exploiting this issue can allow an attacker to execute arbitrary commands with the privileges of the use...

Netrw Vim Script - s:BrowserMaps() Command Execution

Netrw Vim Script - s:BrowserMaps Command Execution source: https://www.securityfocus.com/bid/30254/info Netrw is prone to a command-execution vulnerability because the application fails to sufficiently sanitize user-supplied data. Successfully exploiting this issue can allow an attacker to execut...

Netrw Vim脚本多个命令执行漏洞

BUGTRAQ ID: 30115 CNCAN ID：CNCAN-2008070807 Netrw是一款VIM的支持远程文件读写的插件。 Netrw不正确过滤用户提交的数据，远程攻击者可以利用漏洞以应用程序权限执行任意命令。 多个地方Netrw $VIMRUNTIME/autoload/netrw.vim没有正确过滤用于SHELL参数的文件名数据。 使用特殊构建的文件名调用mz''命令可导致任意代码执行。 使用特殊构建的目录名调用mc''命令可导致任意代码执行。 构建特殊的文件名或者特殊的目录名，运行D'命令可导致任意代码执行。 Dr Chip netrw 125 目前没有解决方案提供：...

Netrw 125 Vim Script - Multiple Command Execution Vulnerabilities

Netrw 125 Vim Script - Multiple Command Execution Vulnerabilities source: https://www.securityfocus.com/bid/30115/info Netrw is prone to multiple command-execution vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Successfully exploiting these issues can...

Netrw 125 Vim Script - Multiple Command Execution Vulnerabilities

source: https://www.securityfocus.com/bid/30115/info Netrw is prone to multiple command-execution vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Successfully exploiting these issues can allow an attacker to execute arbitrary commands with the privileges...

CVE-2008-2712

Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using 1 filetype.vim, 3 xpm.vim, 4 gzipvim, and 5 netrw. NOTE: the...

DEBIAN-CVE-2008-2712

Vim 7.1.314, 6.4, and other versions allows user-assisted remote attackers to execute arbitrary commands via Vim scripts that do not properly sanitize inputs before invoking the execute or system functions, as demonstrated using 1 filetype.vim, 3 xpm.vim, 4 gzipvim, and 5 netrw. NOTE: the...