CVE-2005-0069

The CVE concerns vim 6.3, where the scripts tcltags or vimspell.sh can be exploited by a local attacker via a symlink attack on temporary files to overwrite/create arbitrary files. This is described across multiple advisories (e.g., RHSA/RHSA-2005:036, RHSA-2005:122, SUSE CVE-2005-0069) and is ti...

CVE-2002-1377

CVE-2002-1377 affects Vim 6.0 and 6.1 (and possibly other versions) and is caused by the libcall feature in modelines not being sandboxed, enabling arbitrary command execution when a malicious file is edited (e.g., via mutt). The vulnerability is triggered locally when Opened files contain crafte...