Red Hat セキュリティアドバイザリ 2007:0346 から：

セキュリティ上の問題を修正する更新済みの vim パッケージが、Red Hat Enterprise Linux 5 で現在利用可能です。

Red Hat セキュリティレスポンスチームは、この更新は重要度中のセキュリティ影響があると評価しています。

VIM（VIsual editor iMproved）は vi エディターの 1 つバージョンです。

VIM が modelines を処理する方法で、任意のコマンド実行の欠陥が見つかりました。modelines を有効にしているユーザーが、注意深く細工された modeline を含むテキストファイルを開いた場合、任意のコマンドが VIM を実行しているユーザーとして実行される可能性があります。(CVE-2007-2438)

VIM ユーザーは、これらの更新済みパッケージへアップグレードし、この問題を解決することが推奨されます。

注意：Red Hat Enterprise Linux 2.1、3、または 4 で配布された VIM はこの問題の影響を受けていません。

来自 Red Hat 安全公告 2007:0346：

更新后的 vim 程序包修复了一个安全问题，现在可用于 Red Hat Enterprise Linux 5。

Red Hat 安全响应团队将此更新评级为具有中等安全影响。

VIM (VIsual editor iMproved) 是 vi 编辑器的一个版本。

在 VIM 处理 modeline 的方式中发现一个任意命令执行缺陷。如果启用了 modeline 的用户打开了包含精心构建的 modeline 的文本文件，则能够以运行 VIM 的用户的身份执行任意命令。(CVE-2007-2438)

建议 VIM 用户升级这些更新后的程序包，其中解决了此问题。

请注意：此问题不影响随 Red Hat Enterprise Linux 2.1、3 或 4 分发的 VIM。

來自 Red Hat 安全性公告 2007:0346：

現已提供適用於 Red Hat Enterprise Linux 5 的更新版 vim 套件，可修正一個安全性問題。

Red Hat 安全性回應團隊已將此更新評等為具有中等安全性影響。

VIM (VIsual editor iMproved) 是 vi 編輯器的一個版本。

VIM 處理 modeline 的方式中發現一個任意命令執行瑕疵。如果已啟用 modeline 功能的使用者開啟含有特製 modeline 的文字檔，就能以執行 VIM 的使用者身分執行任意命令。(CVE-2007-2438)

建議 VIM 的使用者升級至這些更新版套件，其可解決此問題。

請注意：此問題未影響隨 Red Hat Enterprise Linux 2.1、3 或 4 發佈的 VIM。

From Red Hat Security Advisory 2007:0346 :

Updated vim packages that fix a security issue are now available for Red Hat Enterprise Linux 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

VIM (VIsual editor iMproved) is a version of the vi editor.

An arbitrary command execution flaw was found in the way VIM processes modelines. If a user with modelines enabled opened a text file containing a carefully crafted modeline, arbitrary commands could be executed as the user running VIM. (CVE-2007-2438)

Users of VIM are advised to upgrade to these updated packages, which resolve this issue.

Please note: this issue did not affect VIM as distributed with Red Hat Enterprise Linux 2.1, 3, or 4.

Files with VIM modelines could call some unsafe VIM functions (CVE-2007-2438). Modelines are disabled in the default config (/etc/vimrc) of openSUSE though.

Updated vim packages that fix a security issue are now available for Red Hat Enterprise Linux 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

VIM (VIsual editor iMproved) is a version of the vi editor.

An arbitrary command execution flaw was found in the way VIM processes modelines. If a user with modelines enabled opened a text file containing a carefully crafted modeline, arbitrary commands could be executed as the user running VIM. (CVE-2007-2438)

Users of VIM are advised to upgrade to these updated packages, which resolve this issue.

Please note: this issue did not affect VIM as distributed with Red Hat Enterprise Linux 2.1, 3, or 4.

A vulnerability in vim 7.0's modeline processing capabilities was discovered where a user with modelines enabled could open a text file containing a carefully crafted modeline, executing arbitrary commands as the user running vim.

Updated packages have been patched to prevent this issue.

Several vulnerabilities have been discovered in the vim editor. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2007-2953     Ulf Harnhammar discovered that a format string flaw in     helptags_one() from src/ex_cmds.c (triggered through the     'helptags' command) can lead to the execution of     arbitrary code.

  - CVE-2007-2438     Editors often provide a way to embed editor     configuration commands (aka modelines) which are     executed once a file is opened. Harmful commands are     filtered by a sandbox mechanism. It was discovered that     function calls to writefile(), feedkeys() and system()     were not filtered, allowing shell command execution with     a carefully crafted file opened in vim.

This updated advisory repairs issues with missing files in the packages for the oldstable distribution (sarge) for the alpha, mips, and mipsel architectures.

Tomas Golembiovsky discovered that some vim commands were accidentally allowed in modelines. By tricking a user into opening a specially crafted file in vim, an attacker could execute arbitrary code with user privileges.

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
67494	Oracle Linux 5：vim（ELSA-2007-0346）	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
67494	Oracle Linux 5：vim (ELSA-2007-0346)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
67494	Oracle Linux 5 : vim (ELSA-2007-0346)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
67494	Oracle Linux 5 : vim (ELSA-2007-0346)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	high
27474	openSUSE 10 Security Update : vim (vim-3410)	Nessus	SuSE Local Security Checks	2007/10/17	2021/1/14	high
25332	RHEL 5 : vim (RHSA-2007:0346)	Nessus	Red Hat Local Security Checks	2007/5/25	2021/1/14	high
25191	Mandrake Linux Security Advisory : vim (MDKSA-2007:101)	Nessus	Mandriva Local Security Checks	2007/5/10	2021/1/6	high
25205	CentOS 5 : vim (CESA-2007:0346)	Nessus	CentOS Local Security Checks	2007/5/11	2021/1/4	high
25964	Debian DSA-1364-2 : vim - several vulnerabilities	Nessus	Debian Local Security Checks	2007/9/3	2021/1/4	high
28063	Ubuntu 6.10 / 7.04 : vim vulnerability (USN-463-1)	Nessus	Ubuntu Local Security Checks	2007/11/10	2021/1/19	high

検出

プラグインの検索

high

high

high

high

high

high

high

high

high

high