CVE-2017-1000382
31.10.2017, 20:29
VIM version 8.0.1187 (and other versions most likely) ignores umask when creating a swap file ("[ORIGINAL_FILENAME].swp") resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the vi binary.EnginsightAffected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| vim | vim | 𝑥 ≤ 8.0.1187 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
openSUSE / SLES Releases
openSUSE Product | |||||||||||||||||||||||||||||||||||||||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| vim |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| vim-data |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| vim-data-common |
| ||||||||||||||||||||||||||||||||||||||||||||||||
| vim-small |
|
Common Weakness Enumeration