What is the severity of CVE-2005-2368?

CVE-2005-2368 has a moderate severity as it allows external attackers to execute arbitrary commands under certain conditions.

Which versions of Vim are affected by CVE-2005-2368?

CVE-2005-2368 affects Vim versions 6.3 and earlier up to 6.3.081.

How can I mitigate the risk of CVE-2005-2368?

You can mitigate CVE-2005-2368 by disabling modelines in your Vim configuration or upgrading to a patched version of Vim.

What type of attacks are possible with CVE-2005-2368?

CVE-2005-2368 allows user-assisted attackers to execute arbitrary shell commands via specially crafted Vim scripts.

Is CVE-2005-2368 a zero-day vulnerability?

CVE-2005-2368 is not a zero-day vulnerability as it was disclosed in 2005, and fixes are available.

Vulnerability/
CVE-2005-2368

critical

9.3

CWE

26/7/2005

7/8/2024

CVE-2005-2368: OS Command Injection

First published: Tue Jul 26 2005(Updated: )

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Vim by Vim Development Group	=6.3
Vim by Vim Development Group	=6.3.011
Vim by Vim Development Group	=6.3.081
Vim by Vim Development Group	=6.3.025
Vim by Vim Development Group	=6.3.044
Vim by Vim Development Group	=6.3.030

Remedy

http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/035402.html

Remedy

http://www.guninski.com/where_do_you_want_billg_to_go_today_5.html

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2005-2368?
CVE-2005-2368 has a moderate severity as it allows external attackers to execute arbitrary commands under certain conditions.
Which versions of Vim are affected by CVE-2005-2368?
CVE-2005-2368 affects Vim versions 6.3 and earlier up to 6.3.081.
How can I mitigate the risk of CVE-2005-2368?
You can mitigate CVE-2005-2368 by disabling modelines in your Vim configuration or upgrading to a patched version of Vim.
What type of attacks are possible with CVE-2005-2368?
CVE-2005-2368 allows user-assisted attackers to execute arbitrary shell commands via specially crafted Vim scripts.
Is CVE-2005-2368 a zero-day vulnerability?
CVE-2005-2368 is not a zero-day vulnerability as it was disclosed in 2005, and fixes are available.

agent/type
agent/first-publish-date
agent/softwarecombine
agent/remedy
collector/mitre-cve
source/MITRE
agent/weakness
agent/references
agent/last-modified-date
agent/author
agent/severity
agent/description
agent/event
agent/source
agent/tags
collector/nvd-historical
agent/software-canonical-lookup-request
collector/nvd-index
vendor/vim development group
canonical/vim by vim development group
version/vim by vim development group/6.3
version/vim by vim development group/6.3.011
version/vim by vim development group/6.3.081
version/vim by vim development group/6.3.025
version/vim by vim development group/6.3.044
version/vim by vim development group/6.3.030

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2005-2368?
CVE-2005-2368 has a moderate severity as it allows external attackers to execute arbitrary commands under certain conditions.
Which versions of Vim are affected by CVE-2005-2368?
CVE-2005-2368 affects Vim versions 6.3 and earlier up to 6.3.081.
How can I mitigate the risk of CVE-2005-2368?
You can mitigate CVE-2005-2368 by disabling modelines in your Vim configuration or upgrading to a patched version of Vim.
What type of attacks are possible with CVE-2005-2368?
CVE-2005-2368 allows user-assisted attackers to execute arbitrary shell commands via specially crafted Vim scripts.
Is CVE-2005-2368 a zero-day vulnerability?
CVE-2005-2368 is not a zero-day vulnerability as it was disclosed in 2005, and fixes are available.