Test ID:	1.3.6.1.4.1.25623.1.0.844653
Category:	Ubuntu Local Security Checks
Title:	Ubuntu: Security Advisory (USN-4582-1)
Summary:	The remote host is missing an update for the 'vim' package(s) announced via the USN-4582-1 advisory.
Description:	Summary: The remote host is missing an update for the 'vim' package(s) announced via the USN-4582-1 advisory. Vulnerability Insight: It was discovered that Vim incorrectly handled permissions on the .swp file. A local attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 LTS. (CVE-2017-17087) It was discovered that Vim incorrectly handled restricted mode. A local attacker could possibly use this issue to bypass restricted mode and execute arbitrary commands. Note: This update only makes executing shell commands more difficult. Restricted mode should not be considered a complete security measure. (CVE-2019-20807) Affected Software/OS: 'vim' package(s) on Ubuntu 16.04, Ubuntu 18.04. Solution: Please install the updated package(s). CVSS Score: 4.6 CVSS Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-17087 http://openwall.com/lists/oss-security/2017/11/27/2 http://security.cucumberlinux.com/security/details.php?id=166 https://github.com/vim/vim/commit/5a73e0ca54c77e067c3b12ea6f35e3e8681e8cf8 https://groups.google.com/d/msg/vim_dev/sRT9BtjLWMk/BRtSXNU4BwAJ https://lists.debian.org/debian-lts-announce/2019/08/msg00003.html https://lists.debian.org/debian-lts-announce/2022/01/msg00003.html https://usn.ubuntu.com/4582-1/ Common Vulnerability Exposure (CVE) ID: CVE-2019-20807 http://seclists.org/fulldisclosure/2020/Jul/24 https://github.com/vim/vim/commit/8c62a08faf89663e5633dc5036cd8695c80f1075 https://github.com/vim/vim/releases/tag/v8.1.0881 https://www.starwindsoftware.com/security/sw-20220812-0003/ SuSE Security Announcement: openSUSE-SU-2020:0794 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00018.html
Copyright	Copyright (C) 2020 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.