[VIM] Security Vulnerability reported in W-Agora 4.2

[Steven M. Christey]

Hello,

I am a computer security professional and the editor for the Common
Vulnerabilities and Exposures (CVE) project.  CVE is a list of
software vulnerabilities, and it is widely used in the computer
security industry.

Recently, a vulnerability in W-Agora 4.2 was publicly reported to a
well-known security mailing list:

  http://www.securityfocus.com/archive/1/408522

Additional information is at:

  http://www.securityfocus.com/bid/14597
  http://secunia.com/advisories/16497
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2648


Is this vulnerability report accurate?  If so, then is the problem
fixed, and in which versions?


Thank you,
Steve Christey
Principal Information Security Engineer
CVE Editor
The MITRE Corporation