Lucene search

[email protected]NVD:CVE-2010-1160

HistoryApr 16, 2010 - 7:30 p.m.

CVE-2010-1160

2010-04-1619:30:00

CWE-59

[email protected]

web.nvd.nist.gov

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, which allows local user-assisted attackers to overwrite arbitrary files via a symlink attack on an attacker-owned file that is being edited by the victim.

Affected configurations

NVD

Node

gnunanoRange≤2.2.3

gnunanoMatch0.5.0

gnunanoMatch0.5.1

gnunanoMatch0.5.2

gnunanoMatch0.5.3

gnunanoMatch0.5.4

gnunanoMatch0.5.5

gnunanoMatch0.6.0

gnunanoMatch0.6.1

gnunanoMatch0.6.2

gnunanoMatch0.6.3

gnunanoMatch0.6.4

gnunanoMatch0.6.5

gnunanoMatch0.6.6

gnunanoMatch0.6.7

gnunanoMatch0.6.8

gnunanoMatch0.6.9

gnunanoMatch0.7.0

gnunanoMatch0.7.1

gnunanoMatch0.7.2

gnunanoMatch0.7.3

gnunanoMatch0.7.4

gnunanoMatch0.7.5

gnunanoMatch0.7.6

gnunanoMatch0.7.7

gnunanoMatch0.7.8

gnunanoMatch0.7.9

gnunanoMatch0.8.0

gnunanoMatch0.8.1

gnunanoMatch0.8.2

gnunanoMatch0.8.3

gnunanoMatch0.8.4

gnunanoMatch0.8.5

gnunanoMatch0.8.6

gnunanoMatch0.8.7

gnunanoMatch0.8.8

gnunanoMatch0.8.9

gnunanoMatch0.9.0

gnunanoMatch0.9.1

gnunanoMatch0.9.2

gnunanoMatch0.9.3

gnunanoMatch0.9.4

gnunanoMatch0.9.5

gnunanoMatch0.9.6

gnunanoMatch0.9.7

gnunanoMatch0.9.8

gnunanoMatch0.9.9

gnunanoMatch0.9.10

gnunanoMatch0.9.11

gnunanoMatch0.9.12

gnunanoMatch0.9.13

gnunanoMatch0.9.14

gnunanoMatch0.9.15

gnunanoMatch0.9.16

gnunanoMatch0.9.17

gnunanoMatch0.9.18

gnunanoMatch0.9.19

gnunanoMatch0.9.20

gnunanoMatch0.9.21

gnunanoMatch0.9.22

gnunanoMatch0.9.23

gnunanoMatch0.9.24

gnunanoMatch0.9.25

gnunanoMatch0.9.99pre1

gnunanoMatch0.9.99pre2

gnunanoMatch0.9.99pre3

gnunanoMatch1.0.0

gnunanoMatch1.0.1

gnunanoMatch1.0.2

gnunanoMatch1.0.3

gnunanoMatch1.0.4

gnunanoMatch1.0.5

gnunanoMatch1.0.6

gnunanoMatch1.0.7

gnunanoMatch1.0.8

gnunanoMatch1.0.9

gnunanoMatch1.1.0

gnunanoMatch1.1.1

gnunanoMatch1.1.2

gnunanoMatch1.1.3

gnunanoMatch1.1.4

gnunanoMatch1.1.5

gnunanoMatch1.1.6

gnunanoMatch1.1.7

gnunanoMatch1.1.8

gnunanoMatch1.1.9

gnunanoMatch1.1.10

gnunanoMatch1.1.11

gnunanoMatch1.1.12

gnunanoMatch1.1.99pre1

gnunanoMatch1.1.99pre2

gnunanoMatch1.1.99pre3

gnunanoMatch1.2.0

gnunanoMatch1.2.1

gnunanoMatch1.2.2

gnunanoMatch1.2.3

gnunanoMatch1.2.4

gnunanoMatch1.2.5

gnunanoMatch1.3.0

gnunanoMatch1.3.1

gnunanoMatch1.3.2

gnunanoMatch1.3.3

gnunanoMatch1.3.4

gnunanoMatch1.3.5

gnunanoMatch1.3.6

gnunanoMatch1.3.7

gnunanoMatch1.3.8

gnunanoMatch1.3.9

gnunanoMatch1.3.10

gnunanoMatch1.3.11

gnunanoMatch1.3.12

gnunanoMatch1.9.99pre1

gnunanoMatch1.9.99pre2

gnunanoMatch1.9.99pre3

gnunanoMatch2.0.0

gnunanoMatch2.0.1

gnunanoMatch2.0.2

gnunanoMatch2.0.3

gnunanoMatch2.0.4

gnunanoMatch2.0.5

gnunanoMatch2.0.6

gnunanoMatch2.0.7

gnunanoMatch2.0.8

gnunanoMatch2.0.9

gnunanoMatch2.1.0

gnunanoMatch2.1.1

gnunanoMatch2.1.2

gnunanoMatch2.1.3

gnunanoMatch2.1.4

gnunanoMatch2.1.5

gnunanoMatch2.1.6

gnunanoMatch2.1.7

gnunanoMatch2.1.8

gnunanoMatch2.1.9

gnunanoMatch2.1.10

gnunanoMatch2.1.11

gnunanoMatch2.1.99pre1

gnunanoMatch2.1.99pre2

gnunanoMatch2.2.0

gnunanoMatch2.2.1

gnunanoMatch2.2.2

References

drosenbe.blogspot.com/2010/03/nano-as-root.html

lists.gnu.org/archive/html/nano-devel/2010-04/msg00000.html

secunia.com/advisories/39444

svn.savannah.gnu.org/viewvc/trunk/nano/ChangeLog?revision=4503&root=nano&view=markup

www.openwall.com/lists/oss-security/2010/04/14/4

www.securitytracker.com/id?1023891

1.9 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:L/AC:M/Au:N/C:N/I:P/A:N

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2010-1160

ubuntucve1 prion1 debiancve1 cve1 cvelist1 openvas8 nessus8 securityvulns2 fedora4 gentoo1