oss-security - Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / NEWS community lists Wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Tue, 8 Jul 2008 13:53:48 -0400 (EDT)
From: "Steven M. Christey" <coley@...us.mitre.org>
To: Jonathan Smith <smithj@...ethemallocs.com>
cc: vim_dev@...glegroups.com, "Steven M. Christey" <coley@...us.mitre.org>,
        "Charles E Campbell, Jr" <drchip@...pbellfamily.biz>,
        oss-security@...ts.openwall.com
Subject: Re: More arbitrary code executions in Netrw version 125, Vim 7.2a.10


On Mon, 7 Jul 2008, Jonathan Smith wrote:

> Steve, could we get CVEs assigned, please? I'd imagine we'd need three;
> one for the tarplugin issue, one for the zipplugin, and one for the
> netrw issues (which are similar enough to probably justify lumping them
> together).

CVE-2008-3074 - tarplugin
CVE-2008-3075 - zipplugin
CVE-2008-3076 - netrw issues

These will be filled in later.

- Steve

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.