Advisories:rPSA-2008-0324

From rPath Wiki

rPath Security Advisory 2008-0324-1

Published: 2008-11-22

Products

• rPath Appliance Platform Linux Service 1
• rPath Appliance Platform Linux Service 2
• rPath Linux 1
• rPath Linux 2

Rating

Minor

Exposure Level Classification

Indirect User Deterministic Unauthorized Access

Updated Versions

• gvim=conary.rpath.com@rpl:1/6.3.90-2.7-1
• gvim=conary.rpath.com@rpl:2/7.2.040-0.1-1
• vim=conary.rpath.com@rpl:1/6.3.90-2.7-1
• vim=conary.rpath.com@rpl:2/7.2.040-0.1-1
• vim-minimal=conary.rpath.com@rpl:1/6.3.90-2.7-1
• vim-minimal=conary.rpath.com@rpl:2/7.2.040-0.1-1

rPath Issue Tracking System

• RPL-2651

References

• CVE-2008-3074
• CVE-2008-3075
• CVE-2008-3076

Description

Previous versions of the vim package contain multiple vulnerabilities,

the most serious of which allow user-assisted attackers to execute

arbitrary commands via maliciously crafted file and directory names.

Copyright 2008 rPath, Inc. This file is distributed under the terms of the MIT License. A copy is available at http://www.rpath.com/permanent/mit-license.html