The (1) tcltags or (2) vimspell.sh scripts in vim 6.3 allow local users to overwrite or create arbitrary files via a symlink attack on temporary files.
Software | From | Fixed in |
---|---|---|
vim_development_group / vim | 6.3.011 | 6.3.011.x |
vim_development_group / vim | 6.3.025 | 6.3.025.x |
vim_development_group / vim | 6.3.030 | 6.3.030.x |
vim_development_group / vim | 6.3.044 | 6.3.044.x |