[VIM] Vendor ACK - CVE-2005-2776 & CVE-2005-2777 update (right link) (fwd)

Steven M. Christey coley at linus.mitre.org
Mon Feb 27 16:58:16 EST 2006



---------- Forwarded message ----------
Date: Mon, 27 Feb 2006 20:25:58 +0100 (CET)
From: LookingGlass
To: cve at mitre.org
Subject: CVE-2005-2776 & CVE-2005-2777 update (right link)


Hi,

I just found out that one of my old tools has some vulnerabilities. An
updated version is at my site, check out:

(update with right link)
http://de-neef.net/articles.php?id=2&page=2

update:
Sun Feb 12 21:32:51 CET 2006
fixed an arbitrary command execution in the DNS Lookup argument. Note that
in order to avoid Cross Site Scripting you need to run with
"register_globals=off" (as anybody should anyway). Added ipv4 only
functionality, check form.php, and follow comments inline.

Could you please update the CVE's?

Grtz,
Nf.




-- 




More information about the VIM mailing list