| |||||||||||||
| ID de Prueba: | 1.3.6.1.4.1.25623.1.0.55083 |
| Categoría: | Conectiva Local Security Checks |
| Título: | Conectiva Security Advisory CLSA-2005:995 (vim) |
| Resumen: | Conectiva Security Advisory CLSA-2005:995 (vim) |
| Descripción: | The remote host is missing updates announced in advisory CLSA-2005:995. Georgi Guninski found a vulnerability in vim that can be exploited to execute arbitrary commands when the user opens a text file specially crafted by an attacker. The vulnerability resides in the 'modelines' feature, which allows one to place some VIM commands inside of a text file. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000995 http://www.vim.org/ http://www.guninski.com/where_do_you_want_billg_to_go_today_5.html Risk factor : Critical |
| Referencia Cruzada: |
BugTraq ID: 14374 Common Vulnerability Exposure (CVE) ID: CVE-2005-2368 http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/035402.html http://www.guninski.com/where_do_you_want_billg_to_go_today_5.html http://www.redhat.com/support/errata/RHSA-2005-745.html http://www.securityfocus.com/bid/14374 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11302 |
| Copyright | Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com |
| Esta es sólo una de 32582 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora. |
|