Mandrake Linux Security Advisory : vim (MDKSA-2005:003)

High Nessus Plugin ID 16116


The remote Mandrake Linux host is missing one or more security updates.


Several 'modeline'-related vulnerabilities were discovered in Vim by Ciaran McCreesh. The updated packages have been patched with Bram Moolenaar's vim 6.3.045 patch which fixes the reported vulnerabilities and adds more conservative 'modeline' rights.


Update the affected packages.

Plugin Details

Severity: High

ID: 16116

File Name: mandrake_MDKSA-2005-003.nasl

Version: $Revision: 1.15 $

Type: local

Published: 2005/01/07

Modified: 2013/05/31

Dependencies: 12634

Risk Information

Risk Factor: High


Base Score: 7.2

Vector: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:mandriva:linux:vim-X11, p-cpe:/a:mandriva:linux:vim-common, p-cpe:/a:mandriva:linux:vim-enhanced, p-cpe:/a:mandriva:linux:vim-minimal, cpe:/o:mandrakesoft:mandrake_linux:10.0, cpe:/o:mandrakesoft:mandrake_linux:10.1, cpe:/o:mandrakesoft:mandrake_linux:9.2

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list

Patch Publication Date: 2005/01/06

Reference Information

CVE: CVE-2004-1138

MDKSA: 2005:003