__________________________________________________________
	
						   The U.S. Department of Energy
					   Computer Incident Advisory Capability
							   ___  __ __    _     ___
							  /       |     /_\   /
							  \___  __|__  /   \  \___
				 __________________________________________________________
	
								 INFORMATION BULLETIN
	
								  VIM Security Update
							   [Red Hat RHSA:2007:0346-3]
	
	May 10, 2007 15:00 GMT                                            Number R-238
	[REVISED 18 Sept 2007]
	______________________________________________________________________________
	PROBLEM:       An arbitrary command execution flaw was found in the way VIM, 
				   Visual editor iMproved) processes modelines. 
	PLATFORM:      Red Hat Enterprise Linux (v. 5 server) 
				   Red Hat Enterprise Linux Desktop (v. 5 client) 
	   			   Debian GNU/Linux 3.1 (sarge) and 4.0 (etch)
	DAMAGE:        Arbitrary commands could be executed as the user running VIM. 
	SOLUTION:      Upgrade to the appropriate version. 
	______________________________________________________________________________
	VULNERABILITY  The risk is MEDIUM. If a user with modelines enabled opened a 
	ASSESSMENT:    text file containing a carefully crafted modeline, arbitrary 
				   commands could be executed as the user running VIM. 
	______________________________________________________________________________
	LINKS: 
	 CIAC BULLETIN:      http://www.ciac.org/ciac/bulletins/r-238.shtml 
	 ORIGINAL BULLETIN:  https://rhn.redhat.com/errata/RHSA-2007-0346.html 
     ADDITIONAL LINK:    http://www.debian.org/security/2007/dsa-1364
	 CVE:                http://www.cve.mitre.org/cgi-bin/cvename.cgi?name= 
						 CVE-2007-2438 
	______________________________________________________________________________
	REVISION HISTORY:
	09/18/2007 - revised R-238 to add a link to Debian Security Advisory DSA-1364-1
                 for Debian GNU/Linux 3.1 (sarge) and 4.0 (etch).



	[***** Start Red Hat RHSA:2007:0346-3 *****]
	
	Moderate: vim security update
	Advisory: RHSA-2007:0346-3 
	Type: Security Advisory 
	Severity: Moderate 
	Issued on: 2007-05-09 
	Last updated on: 2007-05-09 
	Affected Products: Red Hat Enterprise Linux (v. 5 server)
	Red Hat Enterprise Linux Desktop (v. 5 client) 
	OVAL: com.redhat.rhsa-20070346.xml 
	CVEs (cve.mitre.org): CVE-2007-2438
	 
	
	
	Details
	Updated vim packages that fix a security issue are now available for Red 
	Hat Enterprise Linux 5. 
	
	This update has been rated as having moderate security impact by the Red Hat 
	Security Response Team.
	
	VIM (VIsual editor iMproved) is a version of the vi editor. 
	
	An arbitrary command execution flaw was found in the way VIM processes 
	modelines. If a user with modelines enabled opened a text file containing 
	a carefully crafted modeline, arbitrary commands could be executed as the user 
	running VIM. (CVE-2007-2438) 
	
	Users of VIM are advised to upgrade to these updated packages, which 
	resolve this issue. 
	
	Please note: this issue did not affect VIM as distributed with Red Hat 
	Enterprise Linux 2.1, 3, or 4.
	
	
	
	Solution
	Before applying this update, make sure that all previously-released 
	errata relevant to your system have been applied. 
	
	This update is available via Red Hat Network. Details on how to use 
	the Red Hat Network to apply this update are available at 
	http://kbase.redhat.com/faq/FAQ_58_10188
	
	
	Updated packages
	Red Hat Enterprise Linux (v. 5 server) 
	
	--------------------------------------------------------------------------------
	 
	SRPMS: 
	vim-7.0.109-3.el5.3.src.rpm     e057a4d34a4a8560939b9bb588517420 
	  
	IA-32: 
	vim-X11-7.0.109-3.el5.3.i386.rpm     4a3ea5327008913ecade2dabe0337de7 
	vim-common-7.0.109-3.el5.3.i386.rpm     d9589f3dcbe58f3f355a15405915f939 
	vim-enhanced-7.0.109-3.el5.3.i386.rpm     e1a19e0a474ff74a7546ac83a7905f5c 
	vim-minimal-7.0.109-3.el5.3.i386.rpm     6539ac943dbf36d8cdd973363bb8b5ba 
	  
	IA-64: 
	vim-X11-7.0.109-3.el5.3.ia64.rpm     6a019342604776e1a9266ea628292c6b 
	vim-common-7.0.109-3.el5.3.ia64.rpm     77b51bd7442889406418c7bfb2a97942 
	vim-enhanced-7.0.109-3.el5.3.ia64.rpm     0852cd42e83dc460d49d64c454315e63 
	vim-minimal-7.0.109-3.el5.3.ia64.rpm     e94013ed5136148fc4022e217350e198 
	  
	PPC: 
	vim-X11-7.0.109-3.el5.3.ppc.rpm     d1e6aa03f74f9a8bbd1f30c80aaba5fd 
	vim-common-7.0.109-3.el5.3.ppc.rpm     2621bb3dfbef1b8449f61082ecdd6cc8 
	vim-enhanced-7.0.109-3.el5.3.ppc.rpm     e58650f6b7015ee74c018b5e3933d5a2 
	vim-minimal-7.0.109-3.el5.3.ppc.rpm     76491ca22289c0780d74c0cb98b0b2c6 
	  
	s390x: 
	vim-X11-7.0.109-3.el5.3.s390x.rpm     e5a6e15a237641bd9a49b56b128409d6 
	vim-common-7.0.109-3.el5.3.s390x.rpm     1fc67cbb34143778972e0756c6b45cc7 
	vim-enhanced-7.0.109-3.el5.3.s390x.rpm     0dd61a9d9709c3e252439a4b5bb386f7 
	vim-minimal-7.0.109-3.el5.3.s390x.rpm     39d600c984782b2b7399c2a73c64c33a 
	  
	x86_64: 
	vim-X11-7.0.109-3.el5.3.x86_64.rpm     ee97948f2545f7e0a37b33fb0bde8f11 
	vim-common-7.0.109-3.el5.3.x86_64.rpm     986ee1a67308fcb05ea90afa85eb14b4 
	vim-enhanced-7.0.109-3.el5.3.x86_64.rpm     49aa8c77bb180de51539cb7d0f5d635d 
	vim-minimal-7.0.109-3.el5.3.x86_64.rpm     da6d10a02e1cf4121095ab6e9544f4db 
	  
	Red Hat Enterprise Linux Desktop (v. 5 client) 
	
	--------------------------------------------------------------------------------
	 
	SRPMS: 
	vim-7.0.109-3.el5.3.src.rpm     e057a4d34a4a8560939b9bb588517420 
	  
	IA-32: 
	vim-X11-7.0.109-3.el5.3.i386.rpm     4a3ea5327008913ecade2dabe0337de7 
	vim-common-7.0.109-3.el5.3.i386.rpm     d9589f3dcbe58f3f355a15405915f939 
	vim-enhanced-7.0.109-3.el5.3.i386.rpm     e1a19e0a474ff74a7546ac83a7905f5c 
	vim-minimal-7.0.109-3.el5.3.i386.rpm     6539ac943dbf36d8cdd973363bb8b5ba 
	  
	x86_64: 
	vim-X11-7.0.109-3.el5.3.x86_64.rpm     ee97948f2545f7e0a37b33fb0bde8f11 
	vim-common-7.0.109-3.el5.3.x86_64.rpm     986ee1a67308fcb05ea90afa85eb14b4 
	vim-enhanced-7.0.109-3.el5.3.x86_64.rpm     49aa8c77bb180de51539cb7d0f5d635d 
	vim-minimal-7.0.109-3.el5.3.x86_64.rpm     da6d10a02e1cf4121095ab6e9544f4db 
	  
	(The unlinked packages above are only available from the Red Hat Network)
	 
	
	
	Bugs fixed (see bugzilla for more information)
	238259 - CVE-2007-2438 vim-7 modeline security issue
	
	
	
	References
	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2438
	http://www.redhat.com/security/updates/classification/#moderate 
	
	
	--------------------------------------------------------------------------------
	These packages are GPG signed by Red Hat for security. Our key and details on how 
	to verify the signature are available from:
	
	https://www.redhat.com/security/team/key/#package 
	
	The Red Hat security contact is secalert@redhat.com. More contact details at 
	http://www.redhat.com/security/team/contact/
	
	
	[***** End Red Hat RHSA:2007:0346-3 *****]
	_______________________________________________________________________________
	
	CIAC wishes to acknowledge the contributions of Red Hat for the 
	information contained in this bulletin.
	_______________________________________________________________________________
	
	
	CIAC, the Computer Incident Advisory Capability, is the computer
	security incident response team for the U.S. Department of Energy
	(DOE) and the emergency backup response team for the National
	Institutes of Health (NIH). CIAC is located at the Lawrence Livermore
	National Laboratory in Livermore, California. CIAC is also a founding
	member of FIRST, the Forum of Incident Response and Security Teams, a
	global organization established to foster cooperation and coordination
	among computer security teams worldwide.
	
	CIAC services are available to DOE, DOE contractors, and the NIH. CIAC
	can be contacted at:
		Voice:    +1 925-422-8193 (7x24)
		FAX:      +1 925-423-8002
		STU-III:  +1 925-423-2604
		E-mail:   ciac@ciac.org
	
	Previous CIAC notices, anti-virus software, and other information are
	available from the CIAC Computer Security Archive.
	
	   World Wide Web:      http://www.ciac.org/
	   Anonymous FTP:       ftp.ciac.org
	
	PLEASE NOTE: Many users outside of the DOE, ESnet, and NIH computing
	communities receive CIAC bulletins.  If you are not part of these
	communities, please contact your agency's response team to report
	incidents. Your agency's team will coordinate with CIAC. The Forum of
	Incident Response and Security Teams (FIRST) is a world-wide
	organization. A list of FIRST member organizations and their
	constituencies can be obtained via WWW at http://www.first.org/.
	
	This document was prepared as an account of work sponsored by an
	agency of the United States Government. Neither the United States
	Government nor the University of California nor any of their
	employees, makes any warranty, express or implied, or assumes any
	legal liability or responsibility for the accuracy, completeness, or
	usefulness of any information, apparatus, product, or process
	disclosed, or represents that its use would not infringe privately
	owned rights. Reference herein to any specific commercial products,
	process, or service by trade name, trademark, manufacturer, or
	otherwise, does not necessarily constitute or imply its endorsement,
	recommendation or favoring by the United States Government or the
	University of California. The views and opinions of authors expressed
	herein do not necessarily state or reflect those of the United States
	Government or the University of California, and shall not be used for
	advertising or product endorsement purposes.
	
	LAST 10 CIAC BULLETINS ISSUED (Previous bulletins available from CIAC)
	
	R-228: Vulnerabilities in Microsoft Exchange (931832)
	R-229: Vulnerability in Windows DNS RPC Interface (935966)
	R-230: Vulnerabilities in Microsoft Excel (934233)
	R-231: Vulnerabilities in Microsoft Word 
	R-232: Vulnerability in Microsoft Office
	R-233: Cumulative Security Update for Internet Explorer
	R-234: Vulnerability in CAPICOM
	R-235: PHP Security Update
	R-236: ldap-account-manager-- multiple vulnerabilities
	R-237: Trend Micro ServerProtect EarthAgent Vulnerability