Back to Database
Status published
Critical
CVE-2005-2368
vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted...
Vulnerability Description
vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-2368
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/bid/14374
- http://www.redhat.com/support/errata/RHSA-2005-745.html
- http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/035402.html
- http://www.guninski.com/where_do_you_want_billg_to_go_today_5.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11302
More from vim development group
View All →CVE-2007-2953
Format string vulnerability in the helptags_one function in src/ex_cmds.c in...
Medium
6.8
CVE-2007-2438
The sandbox for vim allows dangerous functions such as (1)...
High
7.6
CVE-2005-0069
The (1) tcltags or (2) vimspell.sh scripts in vim 6.3...
Medium
4.6
CVE-2004-1138
VIM before 6.3 and gVim before 6.3 allow local users...
High
7.2
CVE-2002-1377
vim 6.0 and 6.1, and possibly other versions, allows attackers...
Medium
4.6
Affected Vendor
vim development group
View all reports →Affected Software
vim
Vulnerable Versions:
6.3, 6.3.011, 6.3.025, 6.3.030, 6.3.044, 6.3.081
Timeline
Official Publish:
July 26th, 2005
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.