CVE-2008-3074

    Dashboard / Vulnerabilities / CVE-2008-3074

    CVE-2008-3074

    Published: 21 Feb 2009Last Modified: 10 Apr 2026

    Summary:

    Details: The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (exclamation point) shell metacharacter in (1) the filename of a tar archive and possibly (2) the filename of the first file in a tar archive, which is not properly handled by the VIM TAR plugin (tar.vim) v.10 through v.22, as demonstrated by the shellescape, tarplugin.v2, tarplugin, and tarplugin.updated test cases. NOTE: this issue reportedly exists because of an incomplete fix for CVE-2008-2712. NOTE: this issue has the same root cause as CVE-2008-3075. NOTE: due to the complexity of the associated disclosures and the incomplete information related to them, there may be inaccuracies in this CVE description and in external mappings to this identifier.

    References: http://secunia.com/advisories/34418, http://www.mandriva.com/security/advisories?name=MDVSA-2008:236, http://www.rdancer.org/vulnerablevim.html, http://www.openwall.com/lists/oss-security/2008/07/07/4, http://www.rdancer.org/vulnerablevim.html, http://www.openwall.com/lists/oss-security/2008/07/07/4, http://www.rdancer.org/vulnerablevim.html, https://bugzilla.redhat.com/show_bug.cgi?id=467428, http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=506919, http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html, http://marc.info/?l=bugtraq&m=121494431426308&w=2, http://wiki.rpath.com/wiki/Advisories:rPSA-2008-0324, http://www.openwall.com/lists/oss-security/2008/07/07/1, http://www.openwall.com/lists/oss-security/2008/07/08/12, http://www.openwall.com/lists/oss-security/2008/07/10/7, http://www.openwall.com/lists/oss-security/2008/07/13/1, http://www.openwall.com/lists/oss-security/2008/07/15/4, http://www.openwall.com/lists/oss-security/2008/08/01/1, http://www.openwall.com/lists/oss-security/2008/10/15/1, http://www.openwall.com/lists/oss-security/2008/10/20/2, http://www.rdancer.org/vulnerablevim-shellescape.html, http://www.redhat.com/support/errata/RHSA-2008-0580.html, http://www.securityfocus.com/bid/32462, https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10754

    Affected packages

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2008-3074 | CVE-DB