4.6
CVSSv2

CVE-2005-0069

Published: 13/01/2005 Updated: 11/10/2017
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
VMScore: 409
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files.

Vulnerable Product Search on Vulmon Subscribe to Product

vim development group vim 6.3.011

vim development group vim 6.3.025

vim development group vim 6.3.030

vim development group vim 6.3.044

Vendor Advisories

Javier Fern�ndez-Sanguino Pe�a noticed that the auxillary scripts “tcltags” and “vimspellsh” created temporary files in an insecure manner This could allow a symbolic link attack to create or overwrite arbitrary files with the privileges of the user invoking the script (either by calling it directly or by execution through vim) ...
Synopsis vim security update Type/Severity Security Advisory: Low Topic Updated vim packages that fix security vulnerabilities are now availablefor Red Hat Enterprise Linux 4This update has been rated as having low security impact by the Red HatSecurity Response Team Description VIM (Vi I ...
Synopsis vim security update Type/Severity Security Advisory: Low Topic Updated vim packages that fix a security vulnerability are now availableThis update has been rated as having low security impact by the Red HatSecurity Response Team Description VIM (Vi IMproved) is an updated and imp ...