Oval Definition:	oval:org.mitre.oval:def:11203
Revision Date: 2013-04-29 Version: 11 Title: Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case. Description: Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2008-3432 Platform(s): CentOS Linux 3 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 4 Product(s): Definition Synopsis OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 OR CentOS Linux 3.x AND Configuration section vim-minimal is earlier than 1:6.3.046-0.30E.11 OR vim-enhanced is earlier than 1:6.3.046-0.30E.11 OR vim is earlier than 1:6.3.046-0.30E.11 OR vim-X11 is earlier than 1:6.3.046-0.30E.11 OR vim-common is earlier than 1:6.3.046-0.30E.11 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 OR CentOS Linux 4.x OR Oracle Linux 4.x AND Configuration section vim-minimal is earlier than 1:6.3.046-1.el4_7.5z OR vim-enhanced is earlier than 1:6.3.046-1.el4_7.5z OR vim is earlier than 1:6.3.046-1.el4_7.5z OR vim-X11 is earlier than 1:6.3.046-1.el4_7.5z OR vim-common is earlier than 1:6.3.046-1.el4_7.5z
BACK