Date: 26 November 2008
References: ESB-2007.0664 ESB-2008.0959 ESB-2009.0196 ESB-2010.0282
Click here for printable version
Click here for PGP verifiable version
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
===========================================================================
AUSCERT External Security Bulletin Redistribution
ESB-2008.1072 -- [Win][UNIX/Linux]
Moderate: vim security update
26 November 2008
===========================================================================
AusCERT Security Bulletin Summary
---------------------------------
Product: vim
Publisher: Red Hat
Operating System: Red Hat Enterprise Linux 5
Red Hat Enterprise Linux 4
Red Hat Enterprise Linux 3
Red Hat Enterprise Linux 2
UNIX variants (UNIX, Linux, OSX)
Windows
Impact: Execute Arbitrary Code/Commands
Denial of Service
Access: Remote/Unauthenticated
CVE Names: CVE-2008-4101 CVE-2008-3076 CVE-2008-3075
CVE-2008-3074 CVE-2008-2712 CVE-2007-2953
CVE-2008-3432
Ref: ESB-2007.0664
ESB-2008.0959
Original Bulletin: https://rhn.redhat.com/errata/RHSA-2008-0580.html
https://rhn.redhat.com/errata/RHSA-2008-0617.html
https://rhn.redhat.com/errata/RHSA-2008-0618.html
Comment: Many of the vulnerabilities require authentication, however a few
are remotely exploitable.
This bulletin contains three (3) Red Hat Security Advisories.
This advisory references vulnerabilities in products which run on
platforms other than RedHat. It is recommended that administrators
running Vim check for an updated version of the software for
their operating system.
- --------------------------BEGIN INCLUDED TEXT--------------------
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Moderate: vim security update
Advisory ID: RHSA-2008:0580-01
Product: Red Hat Enterprise Linux
Advisory URL: https://rhn.redhat.com/errata/RHSA-2008-0580.html
Issue date: 2008-11-25
CVE Names: CVE-2007-2953 CVE-2008-2712 CVE-2008-3074
CVE-2008-3075 CVE-2008-3076 CVE-2008-4101
=====================================================================
1. Summary:
Updated vim packages that fix security issues are now available for Red Hat
Enterprise Linux 5.
This update has been rated as having moderate security impact by the Red Hat
Security Response Team.
2. Relevant releases/architectures:
Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64
Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64
3. Description:
Vim (Visual editor IMproved) is an updated and improved version of the vi
editor.
Several input sanitization flaws were found in Vim's keyword and tag
handling. If Vim looked up a document's maliciously crafted tag or keyword,
it was possible to execute arbitrary code as the user running Vim.
(CVE-2008-4101)
Multiple security flaws were found in netrw.vim, the Vim plug-in providing
file reading and writing over the network. If a user opened a specially
crafted file or directory with the netrw plug-in, it could result in
arbitrary code execution as the user running Vim. (CVE-2008-3076)
A security flaw was found in zip.vim, the Vim plug-in that handles ZIP
archive browsing. If a user opened a ZIP archive using the zip.vim plug-in,
it could result in arbitrary code execution as the user running Vim.
(CVE-2008-3075)
A security flaw was found in tar.vim, the Vim plug-in which handles TAR
archive browsing. If a user opened a TAR archive using the tar.vim plug-in,
it could result in arbitrary code execution as the user runnin Vim.
(CVE-2008-3074)
Several input sanitization flaws were found in various Vim system
functions. If a user opened a specially crafted file, it was possible to
execute arbitrary code as the user running Vim. (CVE-2008-2712)
Ulf Härnhammar, of Secunia Research, discovered a format string flaw in
Vim's help tag processor. If a user was tricked into executing the
"helptags" command on malicious data, arbitrary code could be executed with
the permissions of the user running Vim. (CVE-2007-2953)
All Vim users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues.
4. Solution:
Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.
This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188
5. Bugs fixed (http://bugzilla.redhat.com/):
248542 - CVE-2007-2953 vim format string flaw
451759 - CVE-2008-2712 vim: command execution via scripts not sanitizing inputs to execute and system
461927 - CVE-2008-4101 vim: arbitrary code execution in commands: K, Control-], g]
467428 - CVE-2008-3074 Vim tar.vim plugin: improper Implementation of shellescape() (arbitrary code execution)
467432 - CVE-2008-3075 Vim zip.vim plugin: improper Implementation of shellescape() (arbitrary code execution)
467439 - CVE-2008-3076 Vim netrw.vim plugin: lack of sanitization throughout netrw.vim can lead to arbitrary code execution
6. Package List:
Red Hat Enterprise Linux Desktop (v. 5 client):
Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Client/en/os/SRPMS/vim-7.0.109-4.el5_2.4z.src.rpm
i386:
vim-X11-7.0.109-4.el5_2.4z.i386.rpm
vim-common-7.0.109-4.el5_2.4z.i386.rpm
vim-debuginfo-7.0.109-4.el5_2.4z.i386.rpm
vim-enhanced-7.0.109-4.el5_2.4z.i386.rpm
vim-minimal-7.0.109-4.el5_2.4z.i386.rpm
x86_64:
vim-X11-7.0.109-4.el5_2.4z.x86_64.rpm
vim-common-7.0.109-4.el5_2.4z.x86_64.rpm
vim-debuginfo-7.0.109-4.el5_2.4z.x86_64.rpm
vim-enhanced-7.0.109-4.el5_2.4z.x86_64.rpm
vim-minimal-7.0.109-4.el5_2.4z.x86_64.rpm
Red Hat Enterprise Linux (v. 5 server):
Source:
ftp://ftp.redhat.com/pub/redhat/linux/enterprise/5Server/en/os/SRPMS/vim-7.0.109-4.el5_2.4z.src.rpm
i386:
vim-X11-7.0.109-4.el5_2.4z.i386.rpm
vim-common-7.0.109-4.el5_2.4z.i386.rpm
vim-debuginfo-7.0.109-4.el5_2.4z.i386.rpm
vim-enhanced-7.0.109-4.el5_2.4z.i386.rpm
vim-minimal-7.0.109-4.el5_2.4z.i386.rpm
ia64:
vim-X11-7.0.109-4.el5_2.4z.ia64.rpm
vim-common-7.0.109-4.el5_2.4z.ia64.rpm
vim-debuginfo-7.0.109-4.el5_2.4z.ia64.rpm
vim-enhanced-7.0.109-4.el5_2.4z.ia64.rpm
vim-minimal-7.0.109-4.el5_2.4z.ia64.rpm
ppc:
vim-X11-7.0.109-4.el5_2.4z.ppc.rpm
vim-common-7.0.109-4.el5_2.4z.ppc.rpm
vim-debuginfo-7.0.109-4.el5_2.4z.ppc.rpm
vim-enhanced-7.0.109-4.el5_2.4z.ppc.rpm
vim-minimal-7.0.109-4.el5_2.4z.ppc.rpm
s390x:
vim-X11-7.0.109-4.el5_2.4z.s390x.rpm
vim-common-7.0.109-4.el5_2.4z.s390x.rpm
vim-debuginfo-7.0.109-4.el5_2.4z.s390x.rpm
vim-enhanced-7.0.109-4.el5_2.4z.s390x.rpm
vim-minimal-7.0.109-4.el5_2.4z.s390x.rpm
x86_64:
vim-X11-7.0.109-4.el5_2.4z.x86_64.rpm
vim-common-7.0.109-4.el5_2.4z.x86_64.rpm
vim-debuginfo-7.0.109-4.el5_2.4z.x86_64.rpm
vim-enhanced-7.0.109-4.el5_2.4z.x86_64.rpm
vim-minimal-7.0.109-4.el5_2.4z.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package
7. References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2953
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2712
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3074
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3075
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3076
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4101
http://www.redhat.com/security/updates/classification/#moderate
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://www.redhat.com/security/team/contact/
Copyright 2008 Red Hat, Inc.
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)
iD8DBQFJK7qUXlSAg2UNWIIRApD6AKCl3yX2mvfOR1eH+yMVz0KOLBh5WQCePFrk
siao5l2XegHs5nJD6bTjwe4=
=OvzW
- -----END PGP SIGNATURE-----
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Moderate: vim security update
Advisory ID: RHSA-2008:0617-01
Product: Red Hat Enterprise Linux
Advisory URL: https://rhn.redhat.com/errata/RHSA-2008-0617.html
Issue date: 2008-11-25
CVE Names: CVE-2007-2953 CVE-2008-2712 CVE-2008-3432
CVE-2008-4101
=====================================================================
1. Summary:
Updated vim packages that fix various security issues are now available for
Red Hat Enterprise Linux 3 and 4.
This update has been rated as having moderate security impact by the Red
Hat Security Response Team.
2. Relevant releases/architectures:
Red Hat Enterprise Linux AS version 3 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Desktop version 3 - i386, x86_64
Red Hat Enterprise Linux ES version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 3 - i386, ia64, x86_64
Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64
Red Hat Enterprise Linux Desktop version 4 - i386, x86_64
Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64
Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64
3. Description:
Vim (Visual editor IMproved) is an updated and improved version of the vi
editor.
Several input sanitization flaws were found in Vim's keyword and tag
handling. If Vim looked up a document's maliciously crafted tag or keyword,
it was possible to execute arbitrary code as the user running Vim.
(CVE-2008-4101)
A heap-based overflow flaw was discovered in Vim's expansion of file name
patterns with shell wildcards. An attacker could create a specially-crafted
file or directory name that, when opened by Vim, caused the application to
crash or, possibly, execute arbitrary code. (CVE-2008-3432)
Several input sanitization flaws were found in various Vim system
functions. If a user opened a specially crafted file, it was possible to
execute arbitrary code as the user running Vim. (CVE-2008-2712)
Ulf Härnhammar, of Secunia Research, discovered a format string flaw in
Vim's help tag processor. If a user was tricked into executing the
"helptags" command on malicious data, arbitrary code could be executed with
the permissions of the user running Vim. (CVE-2007-2953)
All Vim users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues.
4. Solution:
Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.
This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188
5. Bugs fixed (http://bugzilla.redhat.com/):
248542 - CVE-2007-2953 vim format string flaw
451759 - CVE-2008-2712 vim: command execution via scripts not sanitizing inputs to execute and system
455455 - CVE-2008-3432 vim: heap buffer overflow in mch_expand_wildcards()
461927 - CVE-2008-4101 vim: arbitrary code execution in commands: K, Control-], g]
6. Package List:
Red Hat Enterprise Linux AS version 3:
Source:
ftp://updates.redhat.com/enterprise/3AS/en/os/SRPMS/vim-6.3.046-0.30E.11.src.rpm
i386:
vim-X11-6.3.046-0.30E.11.i386.rpm
vim-common-6.3.046-0.30E.11.i386.rpm
vim-debuginfo-6.3.046-0.30E.11.i386.rpm
vim-enhanced-6.3.046-0.30E.11.i386.rpm
vim-minimal-6.3.046-0.30E.11.i386.rpm
ia64:
vim-X11-6.3.046-0.30E.11.ia64.rpm
vim-common-6.3.046-0.30E.11.ia64.rpm
vim-debuginfo-6.3.046-0.30E.11.ia64.rpm
vim-enhanced-6.3.046-0.30E.11.ia64.rpm
vim-minimal-6.3.046-0.30E.11.ia64.rpm
ppc:
vim-X11-6.3.046-0.30E.11.ppc.rpm
vim-common-6.3.046-0.30E.11.ppc.rpm
vim-debuginfo-6.3.046-0.30E.11.ppc.rpm
vim-enhanced-6.3.046-0.30E.11.ppc.rpm
vim-minimal-6.3.046-0.30E.11.ppc.rpm
s390:
vim-X11-6.3.046-0.30E.11.s390.rpm
vim-common-6.3.046-0.30E.11.s390.rpm
vim-debuginfo-6.3.046-0.30E.11.s390.rpm
vim-enhanced-6.3.046-0.30E.11.s390.rpm
vim-minimal-6.3.046-0.30E.11.s390.rpm
s390x:
vim-X11-6.3.046-0.30E.11.s390x.rpm
vim-common-6.3.046-0.30E.11.s390x.rpm
vim-debuginfo-6.3.046-0.30E.11.s390x.rpm
vim-enhanced-6.3.046-0.30E.11.s390x.rpm
vim-minimal-6.3.046-0.30E.11.s390x.rpm
x86_64:
vim-X11-6.3.046-0.30E.11.x86_64.rpm
vim-common-6.3.046-0.30E.11.x86_64.rpm
vim-debuginfo-6.3.046-0.30E.11.x86_64.rpm
vim-enhanced-6.3.046-0.30E.11.x86_64.rpm
vim-minimal-6.3.046-0.30E.11.x86_64.rpm
Red Hat Desktop version 3:
Source:
ftp://updates.redhat.com/enterprise/3desktop/en/os/SRPMS/vim-6.3.046-0.30E.11.src.rpm
i386:
vim-X11-6.3.046-0.30E.11.i386.rpm
vim-common-6.3.046-0.30E.11.i386.rpm
vim-debuginfo-6.3.046-0.30E.11.i386.rpm
vim-enhanced-6.3.046-0.30E.11.i386.rpm
vim-minimal-6.3.046-0.30E.11.i386.rpm
x86_64:
vim-X11-6.3.046-0.30E.11.x86_64.rpm
vim-common-6.3.046-0.30E.11.x86_64.rpm
vim-debuginfo-6.3.046-0.30E.11.x86_64.rpm
vim-enhanced-6.3.046-0.30E.11.x86_64.rpm
vim-minimal-6.3.046-0.30E.11.x86_64.rpm
Red Hat Enterprise Linux ES version 3:
Source:
ftp://updates.redhat.com/enterprise/3ES/en/os/SRPMS/vim-6.3.046-0.30E.11.src.rpm
i386:
vim-X11-6.3.046-0.30E.11.i386.rpm
vim-common-6.3.046-0.30E.11.i386.rpm
vim-debuginfo-6.3.046-0.30E.11.i386.rpm
vim-enhanced-6.3.046-0.30E.11.i386.rpm
vim-minimal-6.3.046-0.30E.11.i386.rpm
ia64:
vim-X11-6.3.046-0.30E.11.ia64.rpm
vim-common-6.3.046-0.30E.11.ia64.rpm
vim-debuginfo-6.3.046-0.30E.11.ia64.rpm
vim-enhanced-6.3.046-0.30E.11.ia64.rpm
vim-minimal-6.3.046-0.30E.11.ia64.rpm
x86_64:
vim-X11-6.3.046-0.30E.11.x86_64.rpm
vim-common-6.3.046-0.30E.11.x86_64.rpm
vim-debuginfo-6.3.046-0.30E.11.x86_64.rpm
vim-enhanced-6.3.046-0.30E.11.x86_64.rpm
vim-minimal-6.3.046-0.30E.11.x86_64.rpm
Red Hat Enterprise Linux WS version 3:
Source:
ftp://updates.redhat.com/enterprise/3WS/en/os/SRPMS/vim-6.3.046-0.30E.11.src.rpm
i386:
vim-X11-6.3.046-0.30E.11.i386.rpm
vim-common-6.3.046-0.30E.11.i386.rpm
vim-debuginfo-6.3.046-0.30E.11.i386.rpm
vim-enhanced-6.3.046-0.30E.11.i386.rpm
vim-minimal-6.3.046-0.30E.11.i386.rpm
ia64:
vim-X11-6.3.046-0.30E.11.ia64.rpm
vim-common-6.3.046-0.30E.11.ia64.rpm
vim-debuginfo-6.3.046-0.30E.11.ia64.rpm
vim-enhanced-6.3.046-0.30E.11.ia64.rpm
vim-minimal-6.3.046-0.30E.11.ia64.rpm
x86_64:
vim-X11-6.3.046-0.30E.11.x86_64.rpm
vim-common-6.3.046-0.30E.11.x86_64.rpm
vim-debuginfo-6.3.046-0.30E.11.x86_64.rpm
vim-enhanced-6.3.046-0.30E.11.x86_64.rpm
vim-minimal-6.3.046-0.30E.11.x86_64.rpm
Red Hat Enterprise Linux AS version 4:
Source:
ftp://updates.redhat.com/enterprise/4AS/en/os/SRPMS/vim-6.3.046-1.el4_7.5z.src.rpm
i386:
vim-X11-6.3.046-1.el4_7.5z.i386.rpm
vim-common-6.3.046-1.el4_7.5z.i386.rpm
vim-debuginfo-6.3.046-1.el4_7.5z.i386.rpm
vim-enhanced-6.3.046-1.el4_7.5z.i386.rpm
vim-minimal-6.3.046-1.el4_7.5z.i386.rpm
ia64:
vim-X11-6.3.046-1.el4_7.5z.ia64.rpm
vim-common-6.3.046-1.el4_7.5z.ia64.rpm
vim-debuginfo-6.3.046-1.el4_7.5z.ia64.rpm
vim-enhanced-6.3.046-1.el4_7.5z.ia64.rpm
vim-minimal-6.3.046-1.el4_7.5z.ia64.rpm
ppc:
vim-X11-6.3.046-1.el4_7.5z.ppc.rpm
vim-common-6.3.046-1.el4_7.5z.ppc.rpm
vim-debuginfo-6.3.046-1.el4_7.5z.ppc.rpm
vim-enhanced-6.3.046-1.el4_7.5z.ppc.rpm
vim-minimal-6.3.046-1.el4_7.5z.ppc.rpm
s390:
vim-X11-6.3.046-1.el4_7.5z.s390.rpm
vim-common-6.3.046-1.el4_7.5z.s390.rpm
vim-debuginfo-6.3.046-1.el4_7.5z.s390.rpm
vim-enhanced-6.3.046-1.el4_7.5z.s390.rpm
vim-minimal-6.3.046-1.el4_7.5z.s390.rpm
s390x:
vim-X11-6.3.046-1.el4_7.5z.s390x.rpm
vim-common-6.3.046-1.el4_7.5z.s390x.rpm
vim-debuginfo-6.3.046-1.el4_7.5z.s390x.rpm
vim-enhanced-6.3.046-1.el4_7.5z.s390x.rpm
vim-minimal-6.3.046-1.el4_7.5z.s390x.rpm
x86_64:
vim-X11-6.3.046-1.el4_7.5z.x86_64.rpm
vim-common-6.3.046-1.el4_7.5z.x86_64.rpm
vim-debuginfo-6.3.046-1.el4_7.5z.x86_64.rpm
vim-enhanced-6.3.046-1.el4_7.5z.x86_64.rpm
vim-minimal-6.3.046-1.el4_7.5z.x86_64.rpm
Red Hat Enterprise Linux Desktop version 4:
Source:
ftp://updates.redhat.com/enterprise/4Desktop/en/os/SRPMS/vim-6.3.046-1.el4_7.5z.src.rpm
i386:
vim-X11-6.3.046-1.el4_7.5z.i386.rpm
vim-common-6.3.046-1.el4_7.5z.i386.rpm
vim-debuginfo-6.3.046-1.el4_7.5z.i386.rpm
vim-enhanced-6.3.046-1.el4_7.5z.i386.rpm
vim-minimal-6.3.046-1.el4_7.5z.i386.rpm
x86_64:
vim-X11-6.3.046-1.el4_7.5z.x86_64.rpm
vim-common-6.3.046-1.el4_7.5z.x86_64.rpm
vim-debuginfo-6.3.046-1.el4_7.5z.x86_64.rpm
vim-enhanced-6.3.046-1.el4_7.5z.x86_64.rpm
vim-minimal-6.3.046-1.el4_7.5z.x86_64.rpm
Red Hat Enterprise Linux ES version 4:
Source:
ftp://updates.redhat.com/enterprise/4ES/en/os/SRPMS/vim-6.3.046-1.el4_7.5z.src.rpm
i386:
vim-X11-6.3.046-1.el4_7.5z.i386.rpm
vim-common-6.3.046-1.el4_7.5z.i386.rpm
vim-debuginfo-6.3.046-1.el4_7.5z.i386.rpm
vim-enhanced-6.3.046-1.el4_7.5z.i386.rpm
vim-minimal-6.3.046-1.el4_7.5z.i386.rpm
ia64:
vim-X11-6.3.046-1.el4_7.5z.ia64.rpm
vim-common-6.3.046-1.el4_7.5z.ia64.rpm
vim-debuginfo-6.3.046-1.el4_7.5z.ia64.rpm
vim-enhanced-6.3.046-1.el4_7.5z.ia64.rpm
vim-minimal-6.3.046-1.el4_7.5z.ia64.rpm
x86_64:
vim-X11-6.3.046-1.el4_7.5z.x86_64.rpm
vim-common-6.3.046-1.el4_7.5z.x86_64.rpm
vim-debuginfo-6.3.046-1.el4_7.5z.x86_64.rpm
vim-enhanced-6.3.046-1.el4_7.5z.x86_64.rpm
vim-minimal-6.3.046-1.el4_7.5z.x86_64.rpm
Red Hat Enterprise Linux WS version 4:
Source:
ftp://updates.redhat.com/enterprise/4WS/en/os/SRPMS/vim-6.3.046-1.el4_7.5z.src.rpm
i386:
vim-X11-6.3.046-1.el4_7.5z.i386.rpm
vim-common-6.3.046-1.el4_7.5z.i386.rpm
vim-debuginfo-6.3.046-1.el4_7.5z.i386.rpm
vim-enhanced-6.3.046-1.el4_7.5z.i386.rpm
vim-minimal-6.3.046-1.el4_7.5z.i386.rpm
ia64:
vim-X11-6.3.046-1.el4_7.5z.ia64.rpm
vim-common-6.3.046-1.el4_7.5z.ia64.rpm
vim-debuginfo-6.3.046-1.el4_7.5z.ia64.rpm
vim-enhanced-6.3.046-1.el4_7.5z.ia64.rpm
vim-minimal-6.3.046-1.el4_7.5z.ia64.rpm
x86_64:
vim-X11-6.3.046-1.el4_7.5z.x86_64.rpm
vim-common-6.3.046-1.el4_7.5z.x86_64.rpm
vim-debuginfo-6.3.046-1.el4_7.5z.x86_64.rpm
vim-enhanced-6.3.046-1.el4_7.5z.x86_64.rpm
vim-minimal-6.3.046-1.el4_7.5z.x86_64.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package
7. References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2953
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2712
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-3432
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4101
http://www.redhat.com/security/updates/classification/#moderate
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://www.redhat.com/security/team/contact/
Copyright 2008 Red Hat, Inc.
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)
iD8DBQFJK74zXlSAg2UNWIIRAkEaAJsE4GdaXALhpGBHKFIY91w2PFGq/QCgiMy/
16jCP9zbKgNqx6iHEUzpga8=
=306T
- -----END PGP SIGNATURE-----
- -----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
=====================================================================
Red Hat Security Advisory
Synopsis: Moderate: vim security update
Advisory ID: RHSA-2008:0618-01
Product: Red Hat Enterprise Linux
Advisory URL: https://rhn.redhat.com/errata/RHSA-2008-0618.html
Issue date: 2008-11-25
CVE Names: CVE-2008-2712 CVE-2008-4101
=====================================================================
1. Summary:
Updated vim packages that fix security issues are now available for Red Hat
Enterprise Linux 2.1.
This update has been rated as having moderate security impact by the Red Hat
Security Response Team.
2. Relevant releases/architectures:
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 - i386, ia64
Red Hat Linux Advanced Workstation 2.1 - ia64
Red Hat Enterprise Linux ES version 2.1 - i386
Red Hat Enterprise Linux WS version 2.1 - i386
3. Description:
Vim (Visual editor IMproved) is an updated and improved version of the vi
editor.
Several input sanitization flaws were found in Vim's keyword and tag
handling. If Vim looked up a document's maliciously crafted tag or keyword,
it was possible to execute arbitrary code as the user running Vim.
(CVE-2008-4101)
Several input sanitization flaws were found in various Vim system
functions. If a user opened a specially crafted file, it was possible to
execute arbitrary code as the user running Vim. (CVE-2008-2712)
All Vim users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues.
4. Solution:
Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.
This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188
5. Bugs fixed (http://bugzilla.redhat.com/):
451759 - CVE-2008-2712 vim: command execution via scripts not sanitizing inputs to execute and system
461927 - CVE-2008-4101 vim: arbitrary code execution in commands: K, Control-], g]
6. Package List:
Red Hat Enterprise Linux AS (Advanced Server) version 2.1 :
Source:
ftp://updates.redhat.com/enterprise/2.1AS/en/os/SRPMS/vim-6.0-7.25.src.rpm
i386:
vim-X11-6.0-7.25.i386.rpm
vim-common-6.0-7.25.i386.rpm
vim-enhanced-6.0-7.25.i386.rpm
vim-minimal-6.0-7.25.i386.rpm
ia64:
vim-X11-6.0-7.25.ia64.rpm
vim-common-6.0-7.25.ia64.rpm
vim-enhanced-6.0-7.25.ia64.rpm
vim-minimal-6.0-7.25.ia64.rpm
Red Hat Linux Advanced Workstation 2.1:
Source:
ftp://updates.redhat.com/enterprise/2.1AW/en/os/SRPMS/vim-6.0-7.25.src.rpm
ia64:
vim-X11-6.0-7.25.ia64.rpm
vim-common-6.0-7.25.ia64.rpm
vim-enhanced-6.0-7.25.ia64.rpm
vim-minimal-6.0-7.25.ia64.rpm
Red Hat Enterprise Linux ES version 2.1:
Source:
ftp://updates.redhat.com/enterprise/2.1ES/en/os/SRPMS/vim-6.0-7.25.src.rpm
i386:
vim-X11-6.0-7.25.i386.rpm
vim-common-6.0-7.25.i386.rpm
vim-enhanced-6.0-7.25.i386.rpm
vim-minimal-6.0-7.25.i386.rpm
Red Hat Enterprise Linux WS version 2.1:
Source:
ftp://updates.redhat.com/enterprise/2.1WS/en/os/SRPMS/vim-6.0-7.25.src.rpm
i386:
vim-X11-6.0-7.25.i386.rpm
vim-common-6.0-7.25.i386.rpm
vim-enhanced-6.0-7.25.i386.rpm
vim-minimal-6.0-7.25.i386.rpm
These packages are GPG signed by Red Hat for security. Our key and
details on how to verify the signature are available from
https://www.redhat.com/security/team/key/#package
7. References:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2712
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4101
http://www.redhat.com/security/updates/classification/#moderate
8. Contact:
The Red Hat security contact is <secalert@redhat.com>. More contact
details at https://www.redhat.com/security/team/contact/
Copyright 2008 Red Hat, Inc.
- -----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)
iD8DBQFJK76zXlSAg2UNWIIRAlfMAJ49jvlkwgpJCRvRUQ15d66rYVTMhQCgmYob
EHfIJ/0gkPusICXsv2IIlkY=
=1G6l
- -----END PGP SIGNATURE-----
- --------------------------END INCLUDED TEXT--------------------
You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.
NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members. As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.
NOTE: This is only the original release of the security bulletin. It may
not be updated when updates to the original are made. If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.
Contact information for the authors of the original document is included
in the Security Bulletin above. If you have any questions or need further
information, please contact them directly.
Previous advisories and external security bulletins can be retrieved from:
http://www.auscert.org.au/render.html?cid=1980
If you believe that your computer system has been compromised or attacked in
any way, we encourage you to let us know by completing the secure National IT
Incident Reporting Form at:
http://www.auscert.org.au/render.html?it=3192
===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072
Internet Email: auscert@auscert.org.au
Facsimile: (07) 3365 7031
Telephone: (07) 3365 4417 (International: +61 7 3365 4417)
AusCERT personnel answer during Queensland business hours
which are GMT+10:00 (AEST).
On call after hours for member emergencies only.
===========================================================================
-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967
iQCVAwUBSSyHpih9+71yA2DNAQINfwP+JsLljT4enBEqQdq0GqQ5Lc3yKfwn4ic9
8pE1xYAkc4U4jXSm6GbGbbob9v1uXBq06Uwr71K2JLGZXSbn/15FNWANNmJKtiTF
NRtJndO8yadbyT5pJCfV36YhycuD7iYt0CcNytIsoAR4Rt8BrspJC1yEZJkaqLT4
V2ddD31Maho=
=5E+R
-----END PGP SIGNATURE-----
|