Re: [ GLSA 200412-10 ] Vim, gVim: Vulnerable options in modelines

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Re: [ GLSA 200412-10 ] Vim, gVim: Vulnerable options in modelines
From: "Alexey I. Froloff" <raorn@xxxxxxx>
Date: Thu, 16 Dec 2004 08:40:54 +0300
In-reply-to: <41C04402.9070606@xxxxxxxxxx>
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mail-followup-to: bugtraq@xxxxxxxxxxxxxxxxx
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm
References: <41C04402.9070606@xxxxxxxxxx>
User-agent: Mutt/1.5.6+cvs20041102i

* Thierry Carrez <koon@> [041215 21:52]:
>   Severity: Normal
>      Title: Vim, gVim: Vulnerable options in modelines
> Workaround
> ==========
> There is no known workaround at this time.
There is workaround - add "set nomodeline" in vimrc.

-- 
Regards, Alexey I. Froloff
AIF5-RIPN, AIF5-RIPE
-------------------------------------------
  Inform-Mobil, Ltd. System Administrator
       http://www.inform-mobil.ru/
Tel: +7(095)504-4709, Fax: +7(095)513-1006

Attachment: pgp5U7SEr5dvz.pgp
Description: PGP signature

References:
- [ GLSA 200412-10 ] Vim, gVim: Vulnerable options in modelines
  - From: Thierry Carrez

Prev by Date: PHP Input Validation Vulnerabilities
Next by Date: iDEFENSE Security Advisory 12.16.04: Samba smbd Security Descriptor Integer Overflow Vulnerability
Previous by thread: [ GLSA 200412-10 ] Vim, gVim: Vulnerable options in modelines
Next by thread: Advisory 01/2004: Multiple vulnerabilities in PHP 4/5
Index(es):
- Date
- Thread