CVE-2008-4101: vim Improper Input Validation

CVSS: 9.3v2.0HighModified

AliasesDEBIAN-CVE-2008-4101

Published 18-09-2008Last modified 07-08-2024

Vulnerability summary

CVE-2008-4101 is a high (CVSS 9.3) Improper Input Validation vulnerability in vim. EPSS estimates a 9.21% chance of exploitation in the next 30 days, higher than 95.3% of scored vulnerabilities. 3 public exploits are recorded.

Overall risk

70/100

0100

High · default modelHow is this calculated?

CVSS score

9.3/10

010

High · v2.0 (NVD)

EPSS score

9.21%

0%100%

Low · 0.00 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits3reference, exploit-database

Advisory lineage

Upstream 0 · Downstream 4

DSA-1733-1 RHSA-2008:0580 RHSA-2008:0617 RHSA-2008:0618

Timeline

18-09-2008
PublishedVulnerability first disclosed.
07-08-2024
Last modifiedVulnerability information updated.

Description

Vim 3.0 through 7.x before 7.2.010 does not properly escape characters, which allows user-assisted attackers to (1) execute arbitrary shell commands by entering a K keystroke on a line that contains a ";" (semicolon) followed by a command, or execute arbitrary Ex commands by entering an argument after a (2) "Ctrl-]" (control close-square-bracket) or (3) "g]" (g close-square-bracket) keystroke sequence, a different issue than CVE-2008-2712.

CVSS metrics

1 score · 1 source · 1 version

v2.09.3

EPSS trend

Probability

9.21%

Chance of exploitation in the next 30 days

Percentile

95%

Versus all other CVEs

30-day change

0.00 pp

From 9.21% on 19-09-2026

19-09-202619-10-2026

EPSS score

9.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (ftp.vim.org)
Maturity: unknown
referenceUnverified
Exploit Reference (groups.google.com)
Maturity: unknown
exploit-databaseremotelinuxVerified
Vim 7.1.314 - Insufficient Shell Escaping Multiple Command Execution Vulnerabilities
Maturity: weaponized

Weaknesses

CWE · root cause

CWE-20Improper Input ValidationThe product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

Affected systems

Debian1 product

vim< 2:7.2.010-1

Vim1 product

vim≤ 7.2 | 3.0 | 4.0 | 5.0 | 5.1 | 5.2 | 5.3 | 5.4 | 5.5 | 5.6 | 5.7 | 5.8 | 6.0 | 6.1 | 6.2 | 6.3 | 6.4 | 7.0 | 7.1

2 vendors · 2 products

References

40 links

www.vmware.com/security/advisories/VMSA-2009-0004.htmlX Refsource CONFIRM
ftp.vim.org/pub/vim/patches/7.2/7.2.010Mailing ListX Refsource MLISTExploit
www.redhat.com/support/errata/RHSA-2008-0618.htmlVendor AdvisoryX Refsource REDHAT
www.openwall.com/lists/oss-security/2008/09/16/5Mailing ListX Refsource MLIST
secunia.com/advisories/31592Third Party AdvisoryX Refsource SECUNIA
www.securityfocus.com/archive/1/495703Mailing ListX Refsource BUGTRAQ
www.ubuntu.com/usn/USN-712-1Vendor AdvisoryX Refsource UBUNTU
www.openwall.com/lists/oss-security/2008/09/11/4Mailing ListX Refsource MLIST
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10894VDB EntrySignatureX Refsource OVAL
www.securityfocus.com/bid/31681VDB EntryX Refsource BID

Show all 40 references

www.openwall.com/lists/oss-security/2008/09/16/6Mailing ListX Refsource MLIST
secunia.com/advisories/32858Third Party AdvisoryX Refsource SECUNIA
secunia.com/advisories/33410Third Party AdvisoryX Refsource SECUNIA
lists.apple.com/archives/security-announce/2010//Mar/msg00001.htmlVendor AdvisoryX Refsource APPLE
www.redhat.com/support/errata/RHSA-2008-0580.htmlVendor AdvisoryX Refsource REDHAT
support.avaya.com/elmodocs2/security/ASA-2009-001.htmX Refsource CONFIRM
exchange.xforce.ibmcloud.com/vulnerabilities/44626VDB EntryX Refsource XF
www.vupen.com/english/advisories/2009/0904VDB EntryX Refsource VUPEN
www.vupen.com/english/advisories/2009/0033VDB EntryX Refsource VUPEN
www.securityfocus.com/archive/1/502322/100/0/threadedMailing ListX Refsource BUGTRAQ
groups.google.com/group/vim_dev/attach/dd32ad3a84f36bb2/K-arbitrary-command-execution.patch?part=2X Refsource MISCPatch
bugzilla.redhat.com/show_bug.cgi?id=461927X Refsource CONFIRM
support.avaya.com/elmodocs2/security/ASA-2008-457.htmX Refsource CONFIRM
secunia.com/advisories/32222Third Party AdvisoryX Refsource SECUNIA
support.apple.com/kb/HT4077X Refsource CONFIRM
www.securityfocus.com/bid/30795VDB EntryX Refsource BID
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5812VDB EntrySignatureX Refsource OVAL
groups.google.com/group/…X Refsource MISC
www.openwall.com/lists/oss-security/2008/09/11/3Mailing ListX Refsource MLIST
www.securityfocus.com/archive/1/495662Mailing ListX Refsource BUGTRAQ
www.mandriva.com/security/advisories?name=MDVSA-2008:236Vendor AdvisoryX Refsource MANDRIVA
www.vupen.com/english/advisories/2008/2780VDB EntryX Refsource VUPEN
secunia.com/advisories/32864Third Party AdvisoryX Refsource SECUNIA
groups.google.com/group/vim_dev/msg/9290f26f9bc11b33Mailing ListX Refsource MLISTPatch
www.rdancer.org/vulnerablevim-K.htmlX Refsource MISC
lists.apple.com/archives/security-announce/2008/Oct/msg00001.htmlVendor AdvisoryX Refsource APPLE
support.apple.com/kb/HT3216X Refsource CONFIRM
groups.google.com/group/vim_dev/browse_thread/thread/1434d0812b5c817e/6ad2d5b50a96668eX Refsource MISCExploit
www.redhat.com/support/errata/RHSA-2008-0617.htmlVendor AdvisoryX Refsource REDHAT
security-tracker.debian.org/tracker/CVE-2008-4101Advisory

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities