Test Kennung:	1.3.6.1.4.1.25623.1.0.67993
Kategorie:	FreeBSD Local Security Checks
Titel:	FreeBSD Ports: vim6, vim6+ruby
Zusammenfassung:	The remote host is missing an update to the system; as announced in the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following packages are affected: vim6 vim6+ruby CVE-2008-3432 Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3432 20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim http://www.securityfocus.com/archive/1/502322/100/0/threaded 30648 http://www.securityfocus.com/bid/30648 31681 http://www.securityfocus.com/bid/31681 32222 http://secunia.com/advisories/32222 32858 http://secunia.com/advisories/32858 33410 http://secunia.com/advisories/33410 ADV-2008-2780 http://www.vupen.com/english/advisories/2008/2780 ADV-2009-0033 http://www.vupen.com/english/advisories/2009/0033 ADV-2009-0904 http://www.vupen.com/english/advisories/2009/0904 APPLE-SA-2008-10-09 http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html RHSA-2008:0617 http://www.redhat.com/support/errata/RHSA-2008-0617.html [oss-security] 20080715 Re: Re: More arbitrary code executions in Netrw http://www.openwall.com/lists/oss-security/2008/07/15/4 [oss-security] 20080731 Re: Re: More arbitrary code executions in Netrw http://www.openwall.com/lists/oss-security/2008/08/01/1 ftp://ftp.vim.org/pub/vim/patches/6.2.429 ftp://ftp.vim.org/pub/vim/patches/6.3/6.3.059 http://support.apple.com/kb/HT3216 http://support.avaya.com/elmodocs2/security/ASA-2009-001.htm http://www.vmware.com/security/advisories/VMSA-2009-0004.html https://bugzilla.redhat.com/show_bug.cgi?id=455455 oval:org.mitre.oval:def:11203 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11203 oval:org.mitre.oval:def:5987 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5987 vim-mchexpandwildcards-bo(44722) https://exchange.xforce.ibmcloud.com/vulnerabilities/44722
Copyright	Copyright (C) 2010 E-Soft Inc.

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.