[VIM] Energizer DUO USB battery charger Issue

Steven M. Christey coley at linus.mitre.org
Wed Mar 10 21:37:07 UTC 2010


The CVE was assigned by CERT but I agree with it.  The software came from 
a vendor web site and it allows much more access than the sysadmin 
intends.  Doesn't matter whether it got compromised at the distribution 
point or if this was intentional by the vendor.  We have a small handful 
of things like this in CVE.  There's a slippery slope between this and 
"POtentially Unwanted Software" though.

- Steve


More information about the VIM mailing list