CVEvulnerability

CVE-2008-3294

3.7 LOW Published 2008-07-24 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2008-07-24
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
3.7 LOW — AV:L/AC:H/Au:N/C:P/I:P/A:P
Weaknesses
CWE-94

Description

src/configure.in in Vim 5.0 through 7.1, when used for a build with Python support, does not ensure that the Makefile-conf temporary file has the intended ownership and permissions, which allows local users to execute arbitrary code by modifying this file during a time window, or by creating it ahead of time with permissions that prevent its modification by configure.

Affected configurations

• vim vim 5.0 • vim vim 5.1 • vim vim 5.2 • vim vim 5.3 • vim vim 5.4 • vim vim 5.5 • vim vim 5.6 • vim vim 5.7 • vim vim 5.8 • vim vim 6.0 • vim vim 6.1 • vim vim 6.2 • vim vim 6.3 • vim vim 6.4 • vim vim 7.0 • vim vim 7.1

Related

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References