From: Secunia Security Advisories (sec-advsecunia.com)
Date: Tue May 13 2003 - 03:27:11 CDT

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
Sun Cobalt update for Vim

READ ONLINE:
http://www.secunia.com/advisories/8769/

CRITICAL:
Moderately critical

IMPACT:
System access

WHERE:
From remote

OPERATING SYSTEM:
Sun Cobalt RaQ XTR
Sun Cobalt RaQ 4

DESCRIPTION:
Sun has issued updates for vim. It is possible to create malicious
text files that can execute arbitrary commands when loaded into vim.

The problem is that vim reads the text file and looks for comments,
which can be exploited to call external commands.

SOLUTION:
Updated packages:

Sun Cobalt RaQ 4:
http://ftp.cobalt.sun.com/pub/packages/raq4/eng/RaQ4-All-Security-2.0.1-16358.pkg

Sun Cobalt RaQ XTR:
http://ftp.cobalt.sun.com/pub/packages/raqxtr/eng/RaQXTR-All-Security-1.0.1-16358.pkg

----------------------------------------------------------------------

Secunia recommends that you verify all advisories you receive, by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

Contact details:
Web : http://www.secunia.com/
E-mail : supportsecunia.com
Tel : +44 (0) 20 7016 2693
Fax : +44 (0) 20 7637 0419

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]