CVE-2017-17087

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be different from the group ownership of the original file), which allows local users to obtain sensitive information by leveraging an applicable group membership, as demonstrated by /etc/shadow owned by root:shadow mode 0640, but /etc/.shadow.swp owned by root:users mode 0640, a different vulnerability than CVE-2017-1000382.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-668

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://openwall.com/lists/oss-security/2017/11/27/2Mailing List
http://security.cucumberlinux.com/security/details.php?id=166Issue Tracking, Third Party Advisory
https://github.com/vim/vim/commit/5a73e0ca54c77e067c3b12ea6f35e3e8681e8cf8Patch, Third Party Advisory
https://groups.google.com/d/msg/vim_dev/sRT9BtjLWMk/BRtSXNU4BwAJIssue Tracking, Mailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/08/msg00003.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/01/msg00003.htmlMailing List, Third Party Advisory
https://usn.ubuntu.com/4582-1/Third Party Advisory
http://openwall.com/lists/oss-security/2017/11/27/2Mailing List
http://security.cucumberlinux.com/security/details.php?id=166Issue Tracking, Third Party Advisory
https://github.com/vim/vim/commit/5a73e0ca54c77e067c3b12ea6f35e3e8681e8cf8Patch, Third Party Advisory
https://groups.google.com/d/msg/vim_dev/sRT9BtjLWMk/BRtSXNU4BwAJIssue Tracking, Mailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/08/msg00003.htmlMailing List, Third Party Advisory
https://lists.debian.org/debian-lts-announce/2022/01/msg00003.htmlMailing List, Third Party Advisory
https://usn.ubuntu.com/4582-1/Third Party Advisory

Timeline

Published: Dec 1, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-170887.5The Enterprise version of SyncBreeze 10.2.12 and earlier is affected by a Remote Denial of Service vulnerability. The web server does not ch CVE-2017-170894.8custom/run.cgi in Webmin before 1.870 allows remote authenticated administrators to conduct XSS attacks via the description field in the cus CVE-2017-170907.5An issue was discovered in chan_skinny.c in Asterisk Open Source 13.18.2 and older, 14.7.2 and older, and 15.1.2 and older, and Certified As CVE-2017-170918.8wp-admin/user-new.php in WordPress before 4.9.1 sets the newbloguser key to a string that can be directly derived from the user ID, which al CVE-2017-170925.4wp-includes/functions.php in WordPress before 4.9.1 does not require the unfiltered_html capability for upload of .js files, which might all CVE-2017-170935.4wp-includes/general-template.php in WordPress before 4.9.1 does not properly restrict the lang attribute of an HTML element, which might all CVE-2017-170945.4wp-includes/feed.php in WordPress before 4.9.1 does not properly restrict enclosures in RSS and Atom fields, which might allow attackers to CVE-2017-170958.8tools/pal2rgb.c in pal2rgb in LibTIFF 4.0.9 allows remote attackers to cause a denial of service (TIFFSetupStrips heap-based buffer overflow CVE-2017-170966.1Cross-site scripting (XSS) vulnerability in the Content Cards plugin before 0.9.7 for WordPress allows remote attackers to inject arbitrary CVE-2017-170979.8gps-server.net GPS Tracking Software (self hosted) 2.x has a password reset procedure that immediately resets passwords upon an unauthentica CVE-2017-170989.8The writeLog function in fn_common.php in gps-server.net GPS Tracking Software (self hosted) through 3.0 allows remote attackers to inject a CVE-2017-170997.8There exists an unauthenticated SEH based Buffer Overflow vulnerability in the HTTP server of Flexense SyncBreeze Enterprise v10.1.16. When