Insecure Socket Directory in Vim < 9.2.1308
Original title: [vim-security] Insecure Socket Directory in Vim < 9.2.1308
Existing directory used for sockets without owner check allowing potential privilege escalation.
An existing directory is used without checking its owner when creating sockets in Vim. This creates an insecure socket directory setup. The vulnerability affects versions prior to 9.2.1308 and is rated low severity with CVE requested but not assigned.
Unconfirmed: CVE requested but not yet assigned
- Socket directory lacks owner verification
- Potential privilege issues
- Affects Vim < 9.2.1308
- Severity: Low
Impact: insecure socket directory setup
- Products
- vim
From the original article
Posted by Christian Brabandt on Nov 08 Insecure Socket Directory in Vim `. An existing directory was used without checking its owner...
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.