Test ID:	1.3.6.1.4.1.25623.1.0.58381
Category:	Mandrake Local Security Checks
Title:	Mandrake Security Advisory MDKSA-2007:101 (vim)
Summary:	NOSUMMARY
Description:	Description: The remote host is missing an update to vim announced via advisory MDKSA-2007:101. A vulnerability in vim 7.0's modeline processing capabilities was discovered where a user with modelines enabled could open a text file containing a carefully crafted modeline, executing arbitrary commands as the user running vim. Updated packages have been patched to prevent this issue. Affected: 2007.0, 2007.1 Solution: To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you. https://secure1.securityspace.com/smysecure/catid.html?in=MDKSA-2007:101 Risk factor : High CVSS Score: 7.6
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2007-2438 BugTraq ID: 23725 http://www.securityfocus.com/bid/23725 Bugtraq: 20070430 FLEA-2007-0014-1: vim (Google Search) http://www.securityfocus.com/archive/1/467202/100/0/threaded Debian Security Information: DSA-1364 (Google Search) http://www.debian.org/security/2007/dsa-1364 http://www.mandriva.com/security/advisories?name=MDKSA-2007:101 http://tech.groups.yahoo.com/group/vimdev/message/46627 http://tech.groups.yahoo.com/group/vimdev/message/46658 http://marc.info/?l=vim-dev&m=117762581821298&w=2 http://marc.info/?l=vim-dev&m=117778983714029&w=2 http://tech.groups.yahoo.com/group/vimannounce/message/178 http://osvdb.org/36250 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9876 http://www.redhat.com/support/errata/RHSA-2007-0346.html http://www.securitytracker.com/id?1018035 http://secunia.com/advisories/25024 http://secunia.com/advisories/25159 http://secunia.com/advisories/25182 http://secunia.com/advisories/25255 http://secunia.com/advisories/25367 http://secunia.com/advisories/25432 http://secunia.com/advisories/26653 SuSE Security Announcement: SUSE-SR:2007:012 (Google Search) http://www.novell.com/linux/security/advisories/2007_12_sr.html http://www.trustix.org/errata/2007/0017/ http://www.ubuntu.com/usn/usn-463-1 http://attrition.org/pipermail/vim/2007-May/001614.html http://www.attrition.org/pipermail/vim/2007-August/001770.html http://www.vupen.com/english/advisories/2007/1599 XForce ISS Database: vim-feedkeyswritefile-command-execution(34012) https://exchange.xforce.ibmcloud.com/vulnerabilities/34012
Copyright	Copyright (c) 2007 E-Soft Inc. http://www.securityspace.com

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.