low2.1Public exploit code
CVE-2001-0409
vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the victim is editing the…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Vim 5.x - Swap File Race Condition2001-01-26 · local · linux · Verified
Impact
vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the victim is editing the file in a world writable directory.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Vim Development Group | Vim | Version 5.7 |
References
- NVD record
- CVE.org record
- http://www.calderasystems.com/support/security/advisories/CSSA-2001-014.0.txt
- http://www.novell.com/linux/security/advisories/2001_012_vim.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6628
- http://www.calderasystems.com/support/security/advisories/CSSA-2001-014.0.txt
- http://www.novell.com/linux/security/advisories/2001_012_vim.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6628