CVE-2001-0408

MediumCVSS 5.1/10Last modified Jun 16, 2026

Description

vim (aka gvim) processes VIM control codes that are embedded in a file, which could allow attackers to execute arbitrary commands when another user opens a file containing malicious VIM control codes.

Metrics

CVSS 2.0 5.1/10AV:N/AC:H/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=98593106111968&w=2
http://www.calderasystems.com/support/security/advisories/CSSA-2001-014.0.txtPatch, Vendor Advisory
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-035.php3
http://www.novell.com/linux/security/advisories/2001_012_vim.html
http://www.redhat.com/support/errata/RHSA-2001-008.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/2510Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6259
http://marc.info/?l=bugtraq&m=98593106111968&w=2
http://www.calderasystems.com/support/security/advisories/CSSA-2001-014.0.txtPatch, Vendor Advisory
http://www.linux-mandrake.com/en/security/2001/MDKSA-2001-035.php3
http://www.novell.com/linux/security/advisories/2001_012_vim.html
http://www.redhat.com/support/errata/RHSA-2001-008.htmlPatch, Vendor Advisory
http://www.securityfocus.com/bid/2510Patch, Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6259

Timeline

Published: Jun 18, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-04092.1vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the vi CVE-2001-04107.5Buffer overflow in Trend Micro Virus Buster 2001 8.02 allows remote attackers to cause a denial of service, and possibly execute arbitrary c CVE-2001-04115.0Reliant Unix 5.44 and earlier allows remote attackers to cause a denial of service via an ICMP port unreachable packet, which causes Reliant CVE-2001-04127.2Cisco Content Services (CSS) switch products 11800 and earlier, aka Arrowpoint, allows local users to gain privileges by entering debug mode CVE-2001-04135.0BinTec X4000 Access router, and possibly other versions, allows remote attackers to cause a denial of service via a SYN port scan, which cau CVE-2001-041410.0Buffer overflow in ntpd ntp daemon 4.0.99k and earlier (aka xntpd and xntp3) allows remote attackers to cause a denial of service and possib CVE-2001-04154.6REDIPlus program, REDI.exe, stores passwords and user names in cleartext in the StartLog.txt log file, which allows local users to gain acce CVE-2001-04162.1sgml-tools (aka sgmltools) before 1.0.9-15 creates temporary files with insecure permissions, which allows other users to read files that ar CVE-2001-04172.1Kerberos 4 (aka krb4) allows local users to overwrite arbitrary files via a symlink attack on new ticket files.CVE-2001-04185.0content.pl script in NCM Content Management System allows remote attackers to read arbitrary contents of the content database by inserting S CVE-2001-04197.5Buffer overflow in shared library ndwfn4.so for iPlanet Web Server (iWS) 4.1, when used as a web listener for Oracle application server 4.0.CVE-2001-04205.0Directory traversal vulnerability in talkback.cgi program allows remote attackers to read arbitrary files via a .. (dot dot) in the article