Test ID:	1.3.6.1.4.1.25623.1.0.54769
Category:	Gentoo Local Security Checks
Title:	Gentoo Security Advisory GLSA 200412-10 (vim)
Summary:	The remote host is missing updates announced in;advisory GLSA 200412-10.
Description:	Summary: The remote host is missing updates announced in advisory GLSA 200412-10. Vulnerability Insight: Several vulnerabilities related to the use of options in modelines have been found and fixed in Vim. They could potentially result in a local user escalating privileges. Solution: All Vim users should upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=app-editors/vim-6.3-r2' All gVim users should also upgrade to the latest version: # emerge --sync # emerge --ask --oneshot --verbose '>=app-editors/gvim-6.3-r2' CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2004-1138 https://bugzilla.fedora.us/show_bug.cgi?id=2343 http://www.gentoo.org/security/en/glsa/glsa-200412-10.xml http://marc.info/?l=bugtraq&m=110313588125609&w=2 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9571 http://www.redhat.com/support/errata/RHSA-2005-010.html http://www.redhat.com/support/errata/RHSA-2005-036.html XForce ISS Database: vim-modeline-gain-privileges(18503) https://exchange.xforce.ibmcloud.com/vulnerabilities/18503
Copyright	Copyright (C) 2008 E-Soft Inc.

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.