Vulnerability Name:

CVE-2008-3294 (CCN-43886)

Assigned:2008-07-17
Published:2008-07-17
Updated:2018-10-11
Summary:src/configure.in in Vim 5.0 through 7.1, when used for a build with Python support, does not ensure that the Makefile-conf temporary file has the intended ownership and permissions, which allows local users to execute arbitrary code by modifying this file during a time window, or by creating it ahead of time with permissions that prevent its modification by configure.
CVSS v3 Severity:5.1 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): Low
Availibility (A): Low
CVSS v2 Severity:3.7 Low (CVSS v2 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P)
3.2 Low (Temporal CVSS v2 Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P/E:H/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): High
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
3.3 Low (CCN CVSS v2 Vector: AV:L/AC:M/Au:N/C:N/I:P/A:P)
2.9 Low (CCN Temporal CVSS v2 Vector: AV:L/AC:M/Au:N/C:N/I:P/A:P/E:H/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Medium
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): Partial
Vulnerability Type:CWE-94
Vulnerability Consequences:File Manipulation
References:Source: CCN
Type: Full-Disclosure Mailing List, Thu Jul 17 2008 - 17:54:18 CDT
Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution

Source: MITRE
Type: CNA
CVE-2008-3294

Source: APPLE
Type: UNKNOWN
APPLE-SA-2008-10-09

Source: FULLDISC
Type: UNKNOWN
20080717 Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution

Source: CCN
Type: SA31159
Vim configure.in Insecure Temporary Files

Source: SECUNIA
Type: Vendor Advisory
31159

Source: CCN
Type: SA32222
Apple Mac OS X Security Update Fixes Multiple Vulnerabilities

Source: SECUNIA
Type: Vendor Advisory
32222

Source: CCN
Type: Apple Web site
About Security Update 2008-007

Source: CONFIRM
Type: UNKNOWN
http://support.apple.com/kb/HT3216

Source: CCN
Type: OSVDB ID: 47079
Vim src/configure.in Temporary File Symlink Arbitrary File Overwrite

Source: BUGTRAQ
Type: UNKNOWN
20080717 Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution

Source: BUGTRAQ
Type: UNKNOWN
20080718 Re: Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution

Source: BUGTRAQ
Type: UNKNOWN
20080725 Re: [Full-disclosure] Vim: Insecure Temporary File Creation During Build: Arbitrary Code Execution

Source: CCN
Type: BID-30279
Vim Insecure Temporary File Creation Vulnerability

Source: BID
Type: UNKNOWN
31681

Source: CCN
Type: BID-31681
RETIRED: Apple Mac OS X 2008-007 Multiple Security Vulnerabilities

Source: CCN
Type: Vim Web site
welcome home : vim online

Source: VUPEN
Type: Vendor Advisory
ADV-2008-2146

Source: VUPEN
Type: Vendor Advisory
ADV-2008-2780

Source: XF
Type: UNKNOWN
vim-configure-symlink(43886)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:vim:vim:5.0:*:*:*:*:*:*:*
  • OR cpe:/a:vim:vim:5.1:*:*:*:*:*:*:*
  • OR cpe:/a:vim:vim:5.2:*:*:*:*:*:*:*
  • OR cpe:/a:vim:vim:5.3:*:*:*:*:*:*:*
  • OR cpe:/a:vim:vim:5.4:*:*:*:*:*:*:*
  • OR cpe:/a:vim:vim:5.5:*:*:*:*:*:*:*
  • OR cpe:/a:vim:vim:5.6:*:*:*:*:*:*:*
  • OR cpe:/a:vim:vim:5.7:*:*:*:*:*:*:*
  • OR cpe:/a:vim:vim:5.8:*:*:*:*:*:*:*
  • OR cpe:/a:vim:vim:6.0:*:*:*:*:*:*:*
  • OR cpe:/a:vim:vim:6.1:*:*:*:*:*:*:*
  • OR cpe:/a:vim:vim:6.2:*:*:*:*:*:*:*
  • OR cpe:/a:vim:vim:6.3:*:*:*:*:*:*:*
  • OR cpe:/a:vim:vim:6.4:*:*:*:*:*:*:*
  • OR cpe:/a:vim:vim:7.0:*:*:*:*:*:*:*
  • OR cpe:/a:vim:vim:7.1:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/a:vim:vim:6.0:*:*:*:*:*:*:*
  • OR cpe:/a:vim:vim:5.0:*:*:*:*:*:*:*
  • OR cpe:/a:vim:vim:7.0:*:*:*:*:*:*:*
  • OR cpe:/a:vim:vim:7.1:*:*:*:*:*:*:*
  • AND
  • cpe:/o:apple:mac_os_x:10.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.5.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.5.1:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.5.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.5.2:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.5.3:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.5.3:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.5.4:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.5.4:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x:10.5.5:*:*:*:*:*:*:*
  • OR cpe:/o:apple:mac_os_x_server:10.5.5:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    vim vim 5.0
    vim vim 5.1
    vim vim 5.2
    vim vim 5.3
    vim vim 5.4
    vim vim 5.5
    vim vim 5.6
    vim vim 5.7
    vim vim 5.8
    vim vim 6.0
    vim vim 6.1
    vim vim 6.2
    vim vim 6.3
    vim vim 6.4
    vim vim 7.0
    vim vim 7.1
    vim vim 6.0
    vim vim 5.0
    vim vim 7.0
    vim vim 7.1
    apple mac os x 10.5
    apple mac os x server 10.5
    apple mac os x 10.5.1
    apple mac os x server 10.5.1
    apple mac os x 10.5.2
    apple mac os x server 10.5.2
    apple mac os x server 10.5.3
    apple mac os x 10.5.3
    apple mac os x 10.5.4
    apple mac os x server 10.5.4
    apple mac os x 10.5.5
    apple mac os x server 10.5.5