local privilege escalation in vim/gvim

2001-04-1015:23:00

lists.opensuse.org

EPSS

0.004

Percentile

72.8%

JSON

The text editor vim, Vi IMproved, was found vulnerable to two security bugs. 1.) a tmp race condition 2.) vim commands in regular files will be executed if the status line of vim is enabled in vimrc Both vulnerabilities could be used to gain unauthorized access to more privileges.

OSVersionArchitecturePackageVersionFilename
openSUSE7.0i386gvim< 5.7-79gvim-5.7-79.i386.rpm
openSUSE7.0ppcvim< 5.7-20vim-5.7-20.ppc.rpm
openSUSE7.0sparcvim< 5.7-54vim-5.7-54.sparc.rpm
openSUSE6.3alphavim< 5.7-57vim-5.7-57.alpha.rpm
openSUSE6.1alphavim< 5.7-57vim-5.7-57.alpha.rpm
openSUSE6.4alphagvim< 5.7-57gvim-5.7-57.alpha.rpm
openSUSE6.4ppcvim< 5.7-19vim-5.7-19.ppc.rpm
openSUSE7.1i386gvim< 5.7-79gvim-5.7-79.i386.rpm
openSUSE7.0i386vim< 5.7-73vim-5.7-73.i386.rpm
openSUSE6.4i386vim< 5.7-72vim-5.7-72.i386.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE	7.0	i386	gvim	< 5.7-79	gvim-5.7-79.i386.rpm
openSUSE	7.0	ppc	vim	< 5.7-20	vim-5.7-20.ppc.rpm
openSUSE	7.0	sparc	vim	< 5.7-54	vim-5.7-54.sparc.rpm
openSUSE	6.3	alpha	vim	< 5.7-57	vim-5.7-57.alpha.rpm
openSUSE	6.1	alpha	vim	< 5.7-57	vim-5.7-57.alpha.rpm
openSUSE	6.4	alpha	gvim	< 5.7-57	gvim-5.7-57.alpha.rpm
openSUSE	6.4	ppc	vim	< 5.7-19	vim-5.7-19.ppc.rpm
openSUSE	7.1	i386	gvim	< 5.7-79	gvim-5.7-79.i386.rpm
openSUSE	7.0	i386	vim	< 5.7-73	vim-5.7-73.i386.rpm
openSUSE	6.4	i386	vim	< 5.7-72	vim-5.7-72.i386.rpm

Rows per page:

1-10 of 261

EPSS

0.004

Percentile

72.8%

JSON

Related for SUSE-SA:2001:12