CVE-2008-3294

src/configure.in in Vim 5.0 through 7.1, when used for a build with Python support, does not ensure that the Makefile-conf temporary file has the intended…

published July 24, 2008

CVSS
—
EPSS
5%
Percentile
91.4
In the wild
Unconfirmed
What it is

src/configure.in in Vim 5.0 through 7.1, when used for a build with Python support, does not ensure that the Makefile-conf temporary file has the intended ownership and permissions, which allows local users to execute arbitrary code by modifying this file during a time window, or by creating it ahead of time with permissions that prevent its modification by configure.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04503 · 91.4th percentile
Published
2008-07-24T18:00Z
EPSS history
Timeline
  • 24 JUL 18:00Z
    src/configure.in in Vim 5.0 through 7.1, when used for a build with Python support, does not ensure that the Makefile-conf temporary file has the intended…
    cvelistv5