CVE-2001-0409: Low severity Vim Development Group Vim vulnerability

Published Jun 18, 2001

Updated

vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the victim is editing the file in a world writable directory.

Affected Software

1 affected component

Vim Development Group Vim=5.7

Remediation

Patch Available

http://www.calderasystems.com/support/security/advisories/CSSA-2001-014.0.txt

Event History

Jun 18, 2001

CVE Published

04:00 AM

Sep 18, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0409?

CVE-2001-0409 is considered a moderate severity vulnerability due to its potential for local exploitation.

How do I fix CVE-2001-0409?

To fix CVE-2001-0409, ensure that backup and swap files are created in secure directories that are not world writable.

Who is affected by CVE-2001-0409?

CVE-2001-0409 affects local users of Vim 5.7 who are editing files in world writable directories.

What kind of attack is associated with CVE-2001-0409?

CVE-2001-0409 is associated with a symlink attack that allows local users to modify files being edited by others.

What are the implications of CVE-2001-0409?

The implications of CVE-2001-0409 include unauthorized file modification and potential data loss for users editing files.