ID de Prueba:	1.3.6.1.4.1.25623.1.0.55083
Categoría:	Conectiva Local Security Checks
Título:	Conectiva Security Advisory CLSA-2005:995 (vim)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is missing updates announced in advisory CLSA-2005:995. Georgi Guninski found a vulnerability in vim that can be exploited to execute arbitrary commands when the user opens a text file specially crafted by an attacker. The vulnerability resides in the 'modelines' feature, which allows one to place some VIM commands inside of a text file. Solution: The apt tool can be used to perform RPM package upgrades by running 'apt-get update' followed by 'apt-get upgrade' http://distro.conectiva.com.br/atualizacoes/index.php?id=a&anuncio=000995 http://www.vim.org/ http://www.guninski.com/where_do_you_want_billg_to_go_today_5.html Risk factor : Critical CVSS Score: 9.3
Referencia Cruzada:	BugTraq ID: 14374 Common Vulnerability Exposure (CVE) ID: CVE-2005-2368 http://www.securityfocus.com/bid/14374 http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/035402.html http://www.guninski.com/where_do_you_want_billg_to_go_today_5.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11302 http://www.redhat.com/support/errata/RHSA-2005-745.html
Copyright	Copyright (c) 2005 E-Soft Inc. http://www.securityspace.com

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.