CVE-2017-1000382

VIM version 8.0.1187 (and other versions most likely) ignores umask when creating a swap file ("[ORIGINAL_FILENAME].swp") resulting in files that may be world…

published October 31, 2017

CVSS
—
EPSS
0%
Percentile
30.9
In the wild
Unconfirmed
What it is

VIM version 8.0.1187 (and other versions most likely) ignores umask when creating a swap file ("[ORIGINAL_FILENAME].swp") resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the vi binary.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00381 · 30.9th percentile
Published
2017-10-31T20:00Z
EPSS history
Timeline
  • 31 OCT 20:00Z
    VIM version 8.0.1187 (and other versions most likely) ignores umask when creating a swap file ("[ORIGINAL_FILENAME].swp") resulting in files that may be world…
    cvelistv5