// For flags

CVE-2005-2368

 

Severity Score

9.3
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

2
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.

vim 6.3 anterior a la 6.3.082, con "modelines" habilitado, permite que atacantes remotos con la implicación del usuario que ejecuten comandos arbitrarios mediante metacaracteres de shell en los comandos "glob" o "expand" de una expresión "foldexpr".

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Medium
Authentication
None
Confidentiality
Complete
Integrity
Complete
Availability
Complete
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2005-07-26 CVE Reserved
  • 2005-07-26 CVE Published
  • 2024-07-02 EPSS Updated
  • 2024-08-07 CVE Updated
  • 2024-08-07 First Exploit
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
CWE
  • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Vim Development Group
Search vendor "Vim Development Group"
Vim
Search vendor "Vim Development Group" for product "Vim"
6.3
Search vendor "Vim Development Group" for product "Vim" and version "6.3"
-
Affected
Vim Development Group
Search vendor "Vim Development Group"
Vim
Search vendor "Vim Development Group" for product "Vim"
6.3.011
Search vendor "Vim Development Group" for product "Vim" and version "6.3.011"
-
Affected
Vim Development Group
Search vendor "Vim Development Group"
Vim
Search vendor "Vim Development Group" for product "Vim"
6.3.025
Search vendor "Vim Development Group" for product "Vim" and version "6.3.025"
-
Affected
Vim Development Group
Search vendor "Vim Development Group"
Vim
Search vendor "Vim Development Group" for product "Vim"
6.3.030
Search vendor "Vim Development Group" for product "Vim" and version "6.3.030"
-
Affected
Vim Development Group
Search vendor "Vim Development Group"
Vim
Search vendor "Vim Development Group" for product "Vim"
6.3.044
Search vendor "Vim Development Group" for product "Vim" and version "6.3.044"
-
Affected
Vim Development Group
Search vendor "Vim Development Group"
Vim
Search vendor "Vim Development Group" for product "Vim"
6.3.081
Search vendor "Vim Development Group" for product "Vim" and version "6.3.081"
-
Affected