Lucene search

[email protected]NVD:CVE-2010-1161

HistoryApr 16, 2010 - 7:30 p.m.

CVE-2010-1161

2010-04-1619:30:00

CWE-362

[email protected]

web.nvd.nist.gov

3.7 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the ownership of arbitrary files via vectors related to the creation of backup files.

Affected configurations

NVD

Node

gnunanoRange≤2.2.3

gnunanoMatch0.5.0

gnunanoMatch0.5.1

gnunanoMatch0.5.2

gnunanoMatch0.5.3

gnunanoMatch0.5.4

gnunanoMatch0.5.5

gnunanoMatch0.6.0

gnunanoMatch0.6.1

gnunanoMatch0.6.2

gnunanoMatch0.6.3

gnunanoMatch0.6.4

gnunanoMatch0.6.5

gnunanoMatch0.6.6

gnunanoMatch0.6.7

gnunanoMatch0.6.8

gnunanoMatch0.6.9

gnunanoMatch0.7.0

gnunanoMatch0.7.1

gnunanoMatch0.7.2

gnunanoMatch0.7.3

gnunanoMatch0.7.4

gnunanoMatch0.7.5

gnunanoMatch0.7.6

gnunanoMatch0.7.7

gnunanoMatch0.7.8

gnunanoMatch0.7.9

gnunanoMatch0.8.0

gnunanoMatch0.8.1

gnunanoMatch0.8.2

gnunanoMatch0.8.3

gnunanoMatch0.8.4

gnunanoMatch0.8.5

gnunanoMatch0.8.6

gnunanoMatch0.8.7

gnunanoMatch0.8.8

gnunanoMatch0.8.9

gnunanoMatch0.9.0

gnunanoMatch0.9.1

gnunanoMatch0.9.2

gnunanoMatch0.9.3

gnunanoMatch0.9.4

gnunanoMatch0.9.5

gnunanoMatch0.9.6

gnunanoMatch0.9.7

gnunanoMatch0.9.8

gnunanoMatch0.9.9

gnunanoMatch0.9.10

gnunanoMatch0.9.11

gnunanoMatch0.9.12

gnunanoMatch0.9.13

gnunanoMatch0.9.14

gnunanoMatch0.9.15

gnunanoMatch0.9.16

gnunanoMatch0.9.17

gnunanoMatch0.9.18

gnunanoMatch0.9.19

gnunanoMatch0.9.20

gnunanoMatch0.9.21

gnunanoMatch0.9.22

gnunanoMatch0.9.23

gnunanoMatch0.9.24

gnunanoMatch0.9.25

gnunanoMatch0.9.99pre1

gnunanoMatch0.9.99pre2

gnunanoMatch0.9.99pre3

gnunanoMatch1.0.0

gnunanoMatch1.0.1

gnunanoMatch1.0.2

gnunanoMatch1.0.3

gnunanoMatch1.0.4

gnunanoMatch1.0.5

gnunanoMatch1.0.6

gnunanoMatch1.0.7

gnunanoMatch1.0.8

gnunanoMatch1.0.9

gnunanoMatch1.1.0

gnunanoMatch1.1.1

gnunanoMatch1.1.2

gnunanoMatch1.1.3

gnunanoMatch1.1.4

gnunanoMatch1.1.5

gnunanoMatch1.1.6

gnunanoMatch1.1.7

gnunanoMatch1.1.8

gnunanoMatch1.1.9

gnunanoMatch1.1.10

gnunanoMatch1.1.11

gnunanoMatch1.1.12

gnunanoMatch1.1.99pre1

gnunanoMatch1.1.99pre2

gnunanoMatch1.1.99pre3

gnunanoMatch1.2.0

gnunanoMatch1.2.1

gnunanoMatch1.2.2

gnunanoMatch1.2.3

gnunanoMatch1.2.4

gnunanoMatch1.2.5

gnunanoMatch1.3.0

gnunanoMatch1.3.1

gnunanoMatch1.3.2

gnunanoMatch1.3.3

gnunanoMatch1.3.4

gnunanoMatch1.3.5

gnunanoMatch1.3.6

gnunanoMatch1.3.7

gnunanoMatch1.3.8

gnunanoMatch1.3.9

gnunanoMatch1.3.10

gnunanoMatch1.3.11

gnunanoMatch1.3.12

gnunanoMatch1.9.99pre1

gnunanoMatch1.9.99pre2

gnunanoMatch1.9.99pre3

gnunanoMatch2.0.0

gnunanoMatch2.0.1

gnunanoMatch2.0.2

gnunanoMatch2.0.3

gnunanoMatch2.0.4

gnunanoMatch2.0.5

gnunanoMatch2.0.6

gnunanoMatch2.0.7

gnunanoMatch2.0.8

gnunanoMatch2.0.9

gnunanoMatch2.1.0

gnunanoMatch2.1.1

gnunanoMatch2.1.2

gnunanoMatch2.1.3

gnunanoMatch2.1.4

gnunanoMatch2.1.5

gnunanoMatch2.1.6

gnunanoMatch2.1.7

gnunanoMatch2.1.8

gnunanoMatch2.1.9

gnunanoMatch2.1.10

gnunanoMatch2.1.11

gnunanoMatch2.1.99pre1

gnunanoMatch2.1.99pre2

gnunanoMatch2.2.0

gnunanoMatch2.2.1

gnunanoMatch2.2.2

References

drosenbe.blogspot.com/2010/03/nano-as-root.html

lists.gnu.org/archive/html/nano-devel/2010-04/msg00000.html

secunia.com/advisories/39444

svn.savannah.gnu.org/viewvc/trunk/nano/ChangeLog?revision=4503&root=nano&view=markup

www.openwall.com/lists/oss-security/2010/04/14/4

www.securitytracker.com/id?1023891

3.7 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

6.1 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2010-1161

prion1 cve1 ubuntucve1 cvelist1 debiancve1 openvas8 nessus8 securityvulns2 gentoo1 fedora4