[USN-52-1] vim vulnerability

From: Martin Pitt (martin.pitt_at_canonical.com)
Date: 12/23/04

Next message: Ofer Shezaf: "RE: phpBB Worm"

Previous message: Martin Pitt: "[USN-51-1] teTeX auxiliary script vulnerability"
Next in thread: Liu Die Yu: "Re: [USN-52-1] vim vulnerability"
Reply: Liu Die Yu: "Re: [USN-52-1] vim vulnerability"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Thu, 23 Dec 2004 14:54:06 +0100
To: ubuntu-security-announce@lists.ubuntu.com

===========================================================
Ubuntu Security Notice USN-52-1 December 23, 2004
vim vulnerability
CAN-2004-1138
===========================================================

A security issue affects the following Ubuntu releases:

Ubuntu 4.10 (Warty Warthog)

The following packages are affected:

kvim
vim
vim-gnome
vim-gtk
vim-lesstif
vim-perl
vim-python
vim-tcl

The problem can be corrected by upgrading the affected package to
version 1:6.3-025+1ubuntu2.1. In general, a standard system upgrade is
sufficient to effect the necessary changes.

Details follow:

Ciaran McCreesh found several vulnerabilities related to the use of
options in Vim modeline commands, such as 'termcap', 'printdevice',
'titleold', 'filetype', 'syntax', 'backupext', 'keymap', 'patchmode',
and 'langmenu'.

If an attacker tricked an user to open a file with a specially crafted
modeline, he could exploit this to execute arbitrary commands with the
user's privileges.

Source archives:

    http://security.ubuntu.com/ubuntu/pool/main/v/vim/vim_6.3-025+1ubuntu2.1.diff.gz
      Size/MD5: 424979 4965410b651e6f5ac01ba2500e45d1ad
    http://security.ubuntu.com/ubuntu/pool/main/v/vim/vim_6.3-025+1ubuntu2.1.dsc
      Size/MD5: 1122 fbabe18da525c6874e00e7144dc1015f
    http://security.ubuntu.com/ubuntu/pool/main/v/vim/vim_6.3.orig.tar.gz
      Size/MD5: 5624622 de1c964ceedbc13538da87d2d73fd117

Architecture independent packages:

    http://security.ubuntu.com/ubuntu/pool/main/v/vim/vim-common_6.3-025+1ubuntu2.1_all.deb
      Size/MD5: 3421062 5e19fadc78b2d58baf8b9c0e469bffe9
    http://security.ubuntu.com/ubuntu/pool/main/v/vim/vim-doc_6.3-025+1ubuntu2.1_all.deb
      Size/MD5: 1646594 0aacbc8f415aac67d4ff67c2567ea9fc

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

    http://security.ubuntu.com/ubuntu/pool/universe/v/vim/kvim_6.3-025+1ubuntu2.1_amd64.deb
      Size/MD5: 2586 dffb544da03f75c78a04240c1a226034
    http://security.ubuntu.com/ubuntu/pool/main/v/vim/vim-gnome_6.3-025+1ubuntu2.1_amd64.deb
      Size/MD5: 805718 684db5c3346c4369b47131fa1e12130e
    http://security.ubuntu.com/ubuntu/pool/universe/v/vim/vim-gtk_6.3-025+1ubuntu2.1_amd64.deb
      Size/MD5: 802444 d62cb45626f58a3d04286734c9f0fff4
    http://security.ubuntu.com/ubuntu/pool/universe/v/vim/vim-lesstif_6.3-025+1ubuntu2.1_amd64.deb
      Size/MD5: 784098 b6023cf232ce1177206aebc3a002ea10
    http://security.ubuntu.com/ubuntu/pool/universe/v/vim/vim-perl_6.3-025+1ubuntu2.1_amd64.deb
      Size/MD5: 809126 2414707b703fb83ac166eef291e00f14
    http://security.ubuntu.com/ubuntu/pool/universe/v/vim/vim-python_6.3-025+1ubuntu2.1_amd64.deb
      Size/MD5: 802464 f9fc02b7e2bddaf8c579b88556b49e52
    http://security.ubuntu.com/ubuntu/pool/universe/v/vim/vim-tcl_6.3-025+1ubuntu2.1_amd64.deb
      Size/MD5: 801154 63c0de866afbe3e898c22dd1c571e4f9
    http://security.ubuntu.com/ubuntu/pool/main/v/vim/vim_6.3-025+1ubuntu2.1_amd64.deb
      Size/MD5: 764954 4efd27d92715dd0b3d518b85a5fdaa23

i386 architecture (x86 compatible Intel/AMD)

powerpc architecture (Apple Macintosh G3/G4/G5)

application/pgp-signature attachment: Digital signature

Next message: Ofer Shezaf: "RE: phpBB Worm"

Previous message: Martin Pitt: "[USN-51-1] teTeX auxiliary script vulnerability"
Next in thread: Liu Die Yu: "Re: [USN-52-1] vim vulnerability"
Reply: Liu Die Yu: "Re: [USN-52-1] vim vulnerability"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Relevant Pages

[Full-Disclosure] [USN-52-1] vim vulnerability
... vim vulnerability ... Ubuntu 4.10 ... The following packages are affected: ...
(Full-Disclosure)
[USN-52-1] vim vulnerability
... vim vulnerability ... Ubuntu 4.10 ... The following packages are affected: ...
(Full-Disclosure)
[Full-Disclosure] [USN-61-1] vim vulnerabilities
... vim vulnerabilities ... Ubuntu 4.10 ... The following packages are affected: ... amd64 architecture ...
(Full-Disclosure)
[USN-61-1] vim vulnerabilities
... vim vulnerabilities ... Ubuntu 4.10 ... The following packages are affected: ... amd64 architecture ...
(Bugtraq)
[USN-61-1] vim vulnerabilities
... vim vulnerabilities ... Ubuntu 4.10 ... The following packages are affected: ... amd64 architecture ...
(Full-Disclosure)