Test ID:	1.3.6.1.4.1.25623.1.0.67993
Category:	FreeBSD Local Security Checks
Title:	FreeBSD Ports: vim6, vim6+ruby
Summary:	FreeBSD Ports: vim6, vim6+ruby
Description:	The remote host is missing an update to the system as announced in the referenced advisory. The following packages are affected: vim6 vim6+ruby CVE-2008-3432 Heap-based buffer overflow in the mch_expand_wildcards function in os_unix.c in Vim 6.2 and 6.3 allows user-assisted attackers to execute arbitrary code via shell metacharacters in filenames, as demonstrated by the netrw.v3 test case. Solution: Update your system with the appropriate patches or software upgrades. http://www.openwall.com/lists/oss-security/2008/07/15/4 http://www.vuxml.org/freebsd/f866d2af-bbba-11df-8a8d-0008743bf21a.html
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3432 Bugtraq: 20090401 VMSA-2009-0004 ESX Service Console updates for openssl, bind, and vim (Google Search) http://www.securityfocus.com/archive/1/archive/1/502322/100/0/threaded http://www.openwall.com/lists/oss-security/2008/07/15/4 http://www.openwall.com/lists/oss-security/2008/08/01/1 http://lists.apple.com/archives/security-announce/2008/Oct/msg00001.html http://www.redhat.com/support/errata/RHSA-2008-0617.html BugTraq ID: 30648 http://www.securityfocus.com/bid/30648 BugTraq ID: 31681 http://www.securityfocus.com/bid/31681 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11203 http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5987 http://secunia.com/advisories/32858 http://www.vupen.com/english/advisories/2008/2780 http://www.vupen.com/english/advisories/2009/0033 http://secunia.com/advisories/32222 http://secunia.com/advisories/33410 http://www.vupen.com/english/advisories/2009/0904 XForce ISS Database: vim-mchexpandwildcards-bo(44722) http://xforce.iss.net/xforce/xfdb/44722
Copyright	Copyright (c) 2010 E-Soft Inc. http://www.securityspace.com

This is only one of 32582 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.

New User Registration Email: UserID: Passwd: Please email me your monthly newsletters, informing the latest services, improvements & surveys. Please email me a vulnerability test announcement whenever a new test is added.     Privacy

Registered User Login   UserID:     Passwd:     Forgot userid or passwd? Email/Userid: