CVE-2005-2368

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-78

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/035402.htmlExploit, Patch, Vendor Advisory
http://www.guninski.com/where_do_you_want_billg_to_go_today_5.htmlExploit, Patch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-745.html
http://www.securityfocus.com/bid/14374
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11302
http://lists.grok.org.uk/pipermail/full-disclosure/2005-July/035402.htmlExploit, Patch, Vendor Advisory
http://www.guninski.com/where_do_you_want_billg_to_go_today_5.htmlExploit, Patch, Vendor Advisory
http://www.redhat.com/support/errata/RHSA-2005-745.html
http://www.securityfocus.com/bid/14374
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11302

Timeline

Published: Jul 26, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-23697.5Multiple integer signedness errors in libgadu, as used in ekg before 1.6rc2 and other packages, may allow remote attackers to cause a denial CVE-2005-23705.0Multiple "memory alignment errors" in libgadu, as used in ekg before 1.6rc2, Gaim before 1.5.0, and other packages, allows remote attackers CVE-2005-23715.0Directory traversal vulnerability in Oracle Reports 6.0, 6i, 9i, and 10g allows remote attackers to overwrite arbitrary files via (1) "..", CVE-2005-23727.2Oracle Forms 4.5 through 10g starts form executables from arbitrary directories and executes them as the Oracle or System user, which allows CVE-2005-23737.2Buffer overflow in SlimFTPd 3.15 and 3.16 allows remote authenticated users to execute arbitrary code via a long directory name to (1) LIST,CVE-2005-23747.5Belkin 54g wireless routers do not properly set an administrative password, which allows remote attackers to gain access via the (1) Telnet CVE-2005-23755.0Format string vulnerability in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service (application crash) via for CVE-2005-23765.0Buffer overflow in Race Driver 1.20 and earlier allows remote attackers to cause a denial of service (application crash) via a long (1) nick CVE-2005-23775.0nss_ldap 181 to versions before 213, as used in Mandrake Corporate Server and Mandrake 10.0, and other operating systems, does not properly CVE-2005-23785.0Directory traversal vulnerability in Oracle Reports allows remote attackers to read arbitrary files via an absolute or relative path to the CVE-2005-23794.3Multiple cross-site scripting (XSS) vulnerabilities in Oracle Reports 9.0.2 allow remote attackers to inject arbitrary web script or HTML vi CVE-2005-23805.0Multiple cross-site scripting vulnerabilities in PHP Surveyor 0.98 allow remote attackers to inject arbitrary web script or HTML via the (1)