CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-3294

src/configure.in in Vim 5.0 through 7.1, when used for a build with Python support, does not ensure that the Makefile-conf temporary file has the intended ownership and permissions, which allows local users to execute arbitrary code by modifying this file during a time window, or by creating it ahead of time with permissions that prevent its modification by configure.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 33.7%

CVSS Severity

CVSS v2 Score 3.7

References

Products affected by CVE-2008-3294

Vim » Vim » Version: 5.0

cpe:2.3:a:vim:vim:5.0
Vim » Vim » Version: 5.1

cpe:2.3:a:vim:vim:5.1
Vim » Vim » Version: 5.2

cpe:2.3:a:vim:vim:5.2
Vim » Vim » Version: 5.3

cpe:2.3:a:vim:vim:5.3
Vim » Vim » Version: 5.4

cpe:2.3:a:vim:vim:5.4
Vim » Vim » Version: 5.5

cpe:2.3:a:vim:vim:5.5
Vim » Vim » Version: 5.6

cpe:2.3:a:vim:vim:5.6
Vim » Vim » Version: 5.7

cpe:2.3:a:vim:vim:5.7
Vim » Vim » Version: 5.8

cpe:2.3:a:vim:vim:5.8
Vim » Vim » Version: 6.0

cpe:2.3:a:vim:vim:6.0
Vim » Vim » Version: 6.1

cpe:2.3:a:vim:vim:6.1
Vim » Vim » Version: 6.2

cpe:2.3:a:vim:vim:6.2
Vim » Vim » Version: 6.3

cpe:2.3:a:vim:vim:6.3
Vim » Vim » Version: 6.4

cpe:2.3:a:vim:vim:6.4
Vim » Vim » Version: 7.0

cpe:2.3:a:vim:vim:7.0
Vim » Vim » Version: 7.1

cpe:2.3:a:vim:vim:7.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-3294

Products

Pricing

Contact Us