Bug#435401: sandbox for vim allows attackers to execute shell commands and wr ite files

Taylor, Christopher PO2 USN (NCTS La Maddalena) taylorc at lamadd.navy.mil
Mon Aug 6 11:17:11 UTC 2007


FrSirt states that this has been fixed as of version 7.0.235[0]. The current
version in unstable is 7.1

The version in stable is currently vulnerable. 

The version in unstable does not appear to be vulnerable, as none of the
exploits I tried against it were successful.




[0]http://www.frsirt.com/english/advisories/2007/1599




More information about the pkg-vim-maintainers mailing list