CVE-2008-6235

NameCVE-2008-6235
DescriptionThe Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the (1) "D" (delete) command or (2) b:netrw_curdir variable, as demonstrated using the netrw.v4 and netrw.v5 test cases.
SourceCVE (at NVD; CERT, LWN, oss-sec, fulldisc, bugtraq, EDB, Metasploit, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, Mageia, GitHub code/issues, web search, more)
NVD severityhigh (attack range: remote)

Vulnerable and fixed packages

The table below lists information on source packages.

Source PackageReleaseVersionStatus
vim (PTS)jessie2:7.4.488-7+deb8u3fixed
jessie (security)2:7.4.488-7+deb8u2fixed
stretch2:8.0.0197-4+deb9u1fixed
buster, sid2:8.1.0875-3fixed

The information below is based on the following data on fixed versions.

PackageTypeReleaseFixed VersionUrgencyOriginDebian Bugs
vimsource(unstable)2:7.2.148-1low
vimsourcelenny(not affected)

Notes

[lenny] - vim <not-affected> (proof-of-concept does not work)
[etch] - vim <no-dsa> (Minor issue)

Search for package or bug name: Reporting problems