Every CVE Search/ Get API key

CVE-2005-2368

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to...

9.3 HighFix available

CVE-2005-2368 is a high vulnerability (CVSS 9.3) in Vim Development Group Vim, published July 26, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.73%, the 86th percentile. Fixed in vim 1:6.3-085+1.

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.

Exploit likelihood

2.73%Up 1.7 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.

Record
CVE-2005-2368
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-78
Updated
2026-11-02
CVE List No score

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.

Record
CVE-2005-2368
Updated
2026-11-02
EUVDEUVD-2005-2369 No score

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.

Record
EUVD-2005-2369
Updated
2026-11-03
GitHub AdvisoriesGHSA-w427-f3fp-6x6x No score

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to...

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.

Record
GHSA-w427-f3fp-6x6x
Weakness
CWE-78
Updated
2026-11-02
OSV No score

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.

Record
CVE-2005-2368
Updated
2026-11-02
OSVDEBIAN-CVE-2005-2368 No score

vim 6.3 before 6.3.082, with modelines enabled, allows external user-assisted attackers to execute arbitrary commands via shell metacharacters in the (1) glob or (2) expand commands of a foldexpr expression for calculating fold levels.

Record
DEBIAN-CVE-2005-2368
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
vim
Debian:12
 before 1:6.3-085+1
1:6.3-085+1
vim
Debian:13
 before 1:6.3-085+1
1:6.3-085+1
vim
Debian:14
 before 1:6.3-085+1
1:6.3-085+1
vim
Debian:4.0
 before 1:6.3-085+0.0etch1
1:6.3-085+0.0etch1
vim
Red Hat:enterprise_linux:3::as
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim-X11
Red Hat:enterprise_linux:3::as
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim-common
Red Hat:enterprise_linux:3::as
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim-debuginfo
Red Hat:enterprise_linux:3::as
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim-enhanced
Red Hat:enterprise_linux:3::as
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim-minimal
Red Hat:enterprise_linux:3::as
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
Show 42 moreShow less
Affected packages
PackageAffectedFixed
vim
Red Hat:enterprise_linux:3::desktop
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim-X11
Red Hat:enterprise_linux:3::desktop
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim-common
Red Hat:enterprise_linux:3::desktop
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim-debuginfo
Red Hat:enterprise_linux:3::desktop
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim-enhanced
Red Hat:enterprise_linux:3::desktop
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim-minimal
Red Hat:enterprise_linux:3::desktop
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim
Red Hat:enterprise_linux:3::es
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim-X11
Red Hat:enterprise_linux:3::es
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim-common
Red Hat:enterprise_linux:3::es
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim-debuginfo
Red Hat:enterprise_linux:3::es
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim-enhanced
Red Hat:enterprise_linux:3::es
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim-minimal
Red Hat:enterprise_linux:3::es
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim
Red Hat:enterprise_linux:3::ws
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim-X11
Red Hat:enterprise_linux:3::ws
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim-common
Red Hat:enterprise_linux:3::ws
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim-debuginfo
Red Hat:enterprise_linux:3::ws
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim-enhanced
Red Hat:enterprise_linux:3::ws
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim-minimal
Red Hat:enterprise_linux:3::ws
 before 1:6.3.046-0.30E.4
1:6.3.046-0.30E.4
vim
Red Hat:enterprise_linux:4::as
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim-X11
Red Hat:enterprise_linux:4::as
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim-common
Red Hat:enterprise_linux:4::as
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim-debuginfo
Red Hat:enterprise_linux:4::as
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim-enhanced
Red Hat:enterprise_linux:4::as
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim-minimal
Red Hat:enterprise_linux:4::as
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim
Red Hat:enterprise_linux:4::desktop
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim-X11
Red Hat:enterprise_linux:4::desktop
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim-common
Red Hat:enterprise_linux:4::desktop
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim-debuginfo
Red Hat:enterprise_linux:4::desktop
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim-enhanced
Red Hat:enterprise_linux:4::desktop
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim-minimal
Red Hat:enterprise_linux:4::desktop
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim
Red Hat:enterprise_linux:4::es
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim-X11
Red Hat:enterprise_linux:4::es
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim-common
Red Hat:enterprise_linux:4::es
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim-debuginfo
Red Hat:enterprise_linux:4::es
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim-enhanced
Red Hat:enterprise_linux:4::es
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim-minimal
Red Hat:enterprise_linux:4::es
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim
Red Hat:enterprise_linux:4::ws
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim-X11
Red Hat:enterprise_linux:4::ws
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim-common
Red Hat:enterprise_linux:4::ws
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim-debuginfo
Red Hat:enterprise_linux:4::ws
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim-enhanced
Red Hat:enterprise_linux:4::ws
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7
vim-minimal
Red Hat:enterprise_linux:4::ws
 before 1:6.3.046-0.40E.7
1:6.3.046-0.40E.7

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, GitHub Advisories, NVD, OSV

References

Show 10 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open