OpenBSD VuXML: Documenting security issues in the OpenBSD Ports & Packages Collection

vim -- modelines execute arbitrary shell code

Affected packages
		vim	<	6.3.082

Details

VuXML ID	7d55ff5a-ffa7-11d9-a07e-000b5d77b0f5
Discovery	2005-07-25
Entry	2005-07-27

im 6.3 before 6.3.082, with modelines enabled, allows attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.

References

CVE Name	CAN-2005-2368
URL	http://www.guninski.com/where_do_you_want_billg_to_go_today_5.html