1.9 Low
CVSS2
Access Vector
LOCAL
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:L/AC:M/Au:N/C:N/I:P/A:N
0.0004 Low
EPSS
Percentile
5.2%
GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, which allows local user-assisted attackers to overwrite arbitrary files via a symlink attack on an attacker-owned file that is being edited by the victim.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
Debian | 12 | all | nano | < 2.2.4-1 | nano_2.2.4-1_all.deb |
Debian | 11 | all | nano | < 2.2.4-1 | nano_2.2.4-1_all.deb |
Debian | 10 | all | nano | < 2.2.4-1 | nano_2.2.4-1_all.deb |
Debian | 999 | all | nano | < 2.2.4-1 | nano_2.2.4-1_all.deb |
Debian | 13 | all | nano | < 2.2.4-1 | nano_2.2.4-1_all.deb |