CVE-2001-0409

Published: Jun 18, 2001Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

vim (aka gvim) allows local users to modify files being edited by other users via a symlink attack on the backup and swap files, when the victim is editing the file in a world writable directory.

Affected (1)

Products: Vim Development Group: Vim

Vim Development Group

1 product

Vim

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Vim Development Group Vim	Version 5.7

References (6)

http://www.calderasystems.com/support/security/advisories/CSSA-2001-014.0.txt

Source: cve@mitre.org

PatchVendor Advisory

http://www.novell.com/linux/security/advisories/2001_012_vim.html

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/6628

Source: cve@mitre.org

http://www.calderasystems.com/support/security/advisories/CSSA-2001-014.0.txt

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.novell.com/linux/security/advisories/2001_012_vim.html

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/6628

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.