This host is installed with Vim and is prone to Command Injection Vulnerability.

Successful exploitation will let the attacker execute arbitrary shell commands to compromise the system. Impact Level: Application

Upgrade to version 7.2 http://www.vim.org/download.php

This error is due to the 'filetype.vim', 'tar.vim', 'zip.vim', 'xpm.vim', 'xpm2.vim', 'gzip.vim', and 'netrw.vim' scripts whcih are insufficiently filtering special characters.

Vim version prior to 7.2 on Linux.

• http://secunia.com/advisories/30731/
• http://www.rdancer.org/vulnerablevim-shellescape.html

---

Updated on 2015-03-25