4.3

CVE-2008-4677

autoload/netrw.vim (aka the Netrw Plugin) 109, 131, and other versions before 133k for Vim 7.1.266, other 7.1 versions, and 7.2 stores credentials for an FTP session, and sends those credentials when attempting to establish subsequent FTP sessions to servers on different hosts, which allows remote FTP servers to obtain sensitive information in opportunistic circumstances by logging usernames and passwords.  NOTE: the upstream vendor disputes a vector involving different ports on the same host, stating "I'm assuming that they're using the same id and password on that unchanged hostname, deliberately."

Data is provided by the National Vulnerability Database (NVD)
Vim ≫ Netrw Version109
   Vim ≫ Vim Version7.1
   Vim ≫ Vim Version7.1.266
   Vim ≫ Vim Version7.2
Vim ≫ Netrw Version110
   Vim ≫ Vim Version7.1
   Vim ≫ Vim Version7.1.266
   Vim ≫ Vim Version7.2
Vim ≫ Netrw Version111
   Vim ≫ Vim Version7.1
   Vim ≫ Vim Version7.1.266
   Vim ≫ Vim Version7.2
Vim ≫ Netrw Version112
   Vim ≫ Vim Version7.1
   Vim ≫ Vim Version7.1.266
   Vim ≫ Vim Version7.2
Vim ≫ Netrw Version113
   Vim ≫ Vim Version7.1
   Vim ≫ Vim Version7.1.266
   Vim ≫ Vim Version7.2
Vim ≫ Netrw Version114
   Vim ≫ Vim Version7.1
   Vim ≫ Vim Version7.1.266
   Vim ≫ Vim Version7.2
Vim ≫ Netrw Version115
   Vim ≫ Vim Version7.1
   Vim ≫ Vim Version7.1.266
   Vim ≫ Vim Version7.2
Vim ≫ Netrw Version116
   Vim ≫ Vim Version7.1
   Vim ≫ Vim Version7.1.266
   Vim ≫ Vim Version7.2
Vim ≫ Netrw Version118
   Vim ≫ Vim Version7.1
   Vim ≫ Vim Version7.1.266
   Vim ≫ Vim Version7.2
Vim ≫ Netrw Version120
   Vim ≫ Vim Version7.1
   Vim ≫ Vim Version7.1.266
   Vim ≫ Vim Version7.2
Vim ≫ Netrw Version121
   Vim ≫ Vim Version7.1
   Vim ≫ Vim Version7.1.266
   Vim ≫ Vim Version7.2
Vim ≫ Netrw Version122
   Vim ≫ Vim Version7.1
   Vim ≫ Vim Version7.1.266
   Vim ≫ Vim Version7.2
Vim ≫ Netrw Version123
   Vim ≫ Vim Version7.1
   Vim ≫ Vim Version7.1.266
   Vim ≫ Vim Version7.2
Vim ≫ Netrw Version128
   Vim ≫ Vim Version7.1
   Vim ≫ Vim Version7.1.266
   Vim ≫ Vim Version7.2
Vim ≫ Netrw Version131
   Vim ≫ Vim Version7.1
   Vim ≫ Vim Version7.1.266
   Vim ≫ Vim Version7.2
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.93% 0.739
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4.3 8.6 2.9
AV:N/AC:M/Au:N/C:P/I:N/A:N