2.1
CVSSv2

CVE-2001-0409

Published: 18/06/2001 Updated: 10/10/2017
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
VMScore: 215
Vector: AV:L/AC:L/Au:N/C:N/I:P/A:N

Vulnerability Summary

vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the victim is editing the file in a world writable directory.

Vulnerable Product Search on Vulmon Subscribe to Product

vim development group vim 5.7

Exploits

/* source: wwwsecurityfocuscom/bid/2927/info Vim is an enhanced version of the popular text editor vi A race condition vulnerability exists in the swap file mechanism used by the 'vim' program The error occurs when a swap file name for a file being opened is symbolically linked to a non-existent file By conjecturing the name of a fil ...