Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
autoload/netrw.vim (aka the Netrw Plugin) 109, 131, and other versions before 133k for Vim 7.1.266, other 7.1 versions, and 7.2 stores credentials for an FTP session, and sends those credentials when attempting to establish subsequent FTP sessions to servers on different hosts, which allows remote FTP servers to obtain sensitive information in opportunistic circumstances by logging usernames and passwords. NOTE: the upstream vendor disputes a vector involving different ports on the same host, stating "I'm assuming that they're using the same id and password on that unchanged hostname, deliberately."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Netrw Vim Script 'netrw.vim' 信息泄露漏洞
Vulnerability Description
Vim的autoload/netrw.vim(又称Netrw Plugin)109，131储存FTP会话的信任证书，当试图建立连续的FTP会话到不同主机上的服务器时，它会把这些信任证书发送出去，远程FTP服务期有机会获得登录用户名和密码这样的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A