Back to Database
Status published
Medium
CVE-2005-0069
The (1) tcltags or (2) vimspell.sh scripts in vim 6.3...
Vulnerability Description
The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-0069
Credits & Attribution
No credits recorded in the NVD database.
References
- http://securitytracker.com/id?1012938
- https://bugzilla.fedora.us/show_bug.cgi?id=2343
- http://marc.info/?l=bugtraq&m=110608387001863&w=2
- http://www.redhat.com/support/errata/RHSA-2005-122.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9402
- http://secunia.com/advisories/13841/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18870
- http://www.redhat.com/support/errata/RHSA-2005-036.html
More from vim development group
View All →CVE-2007-2953
Format string vulnerability in the helptags_one function in src/ex_cmds.c in...
Medium
6.8
CVE-2007-2438
The sandbox for vim allows dangerous functions such as (1)...
High
7.6
CVE-2005-2368
vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted...
Critical
9.3
CVE-2004-1138
VIM before 6.3 and gVim before 6.3 allow local users...
High
7.2
CVE-2002-1377
vim 6.0 and 6.1, and possibly other versions, allows attackers...
Medium
4.6
Affected Vendor
vim development group
View all reports →Affected Software
vim
Vulnerable Versions:
6.3.011, 6.3.025, 6.3.030, 6.3.044
Timeline
Official Publish:
January 29th, 2005
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.