CVE-2010-1160
EUVD-2010-119016.04.2010, 19:30
GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, which allows local user-assisted attackers to overwrite arbitrary files via a symlink attack on an attacker-owned file that is being edited by the victim.
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| gnu | nano | 𝑥 ≤ 2.2.3 |
| gnu | nano | 0.5.0 |
| gnu | nano | 0.5.1 |
| gnu | nano | 0.5.2 |
| gnu | nano | 0.5.3 |
| gnu | nano | 0.5.4 |
| gnu | nano | 0.5.5 |
| gnu | nano | 0.6.0 |
| gnu | nano | 0.6.1 |
| gnu | nano | 0.6.2 |
| gnu | nano | 0.6.3 |
| gnu | nano | 0.6.4 |
| gnu | nano | 0.6.5 |
| gnu | nano | 0.6.6 |
| gnu | nano | 0.6.7 |
| gnu | nano | 0.6.8 |
| gnu | nano | 0.6.9 |
| gnu | nano | 0.7.0 |
| gnu | nano | 0.7.1 |
| gnu | nano | 0.7.2 |
| gnu | nano | 0.7.3 |
| gnu | nano | 0.7.4 |
| gnu | nano | 0.7.5 |
| gnu | nano | 0.7.6 |
| gnu | nano | 0.7.7 |
| gnu | nano | 0.7.8 |
| gnu | nano | 0.7.9 |
| gnu | nano | 0.8.0 |
| gnu | nano | 0.8.1 |
| gnu | nano | 0.8.2 |
| gnu | nano | 0.8.3 |
| gnu | nano | 0.8.4 |
| gnu | nano | 0.8.5 |
| gnu | nano | 0.8.6 |
| gnu | nano | 0.8.7 |
| gnu | nano | 0.8.8 |
| gnu | nano | 0.8.9 |
| gnu | nano | 0.9.0 |
| gnu | nano | 0.9.1 |
| gnu | nano | 0.9.2 |
| gnu | nano | 0.9.3 |
| gnu | nano | 0.9.4 |
| gnu | nano | 0.9.5 |
| gnu | nano | 0.9.6 |
| gnu | nano | 0.9.7 |
| gnu | nano | 0.9.8 |
| gnu | nano | 0.9.9 |
| gnu | nano | 0.9.10 |
| gnu | nano | 0.9.11 |
| gnu | nano | 0.9.12 |
| gnu | nano | 0.9.13 |
| gnu | nano | 0.9.14 |
| gnu | nano | 0.9.15 |
| gnu | nano | 0.9.16 |
| gnu | nano | 0.9.17 |
| gnu | nano | 0.9.18 |
| gnu | nano | 0.9.19 |
| gnu | nano | 0.9.20 |
| gnu | nano | 0.9.21 |
| gnu | nano | 0.9.22 |
| gnu | nano | 0.9.23 |
| gnu | nano | 0.9.24 |
| gnu | nano | 0.9.25 |
| gnu | nano | 0.9.99pre1:pre1 |
| gnu | nano | 0.9.99pre2:pre2 |
| gnu | nano | 0.9.99pre3:pre3 |
| gnu | nano | 1.0.0 |
| gnu | nano | 1.0.1 |
| gnu | nano | 1.0.2 |
| gnu | nano | 1.0.3 |
| gnu | nano | 1.0.4 |
| gnu | nano | 1.0.5 |
| gnu | nano | 1.0.6 |
| gnu | nano | 1.0.7 |
| gnu | nano | 1.0.8 |
| gnu | nano | 1.0.9 |
| gnu | nano | 1.1.0 |
| gnu | nano | 1.1.1 |
| gnu | nano | 1.1.2 |
| gnu | nano | 1.1.3 |
| gnu | nano | 1.1.4 |
| gnu | nano | 1.1.5 |
| gnu | nano | 1.1.6 |
| gnu | nano | 1.1.7 |
| gnu | nano | 1.1.8 |
| gnu | nano | 1.1.9 |
| gnu | nano | 1.1.10 |
| gnu | nano | 1.1.11 |
| gnu | nano | 1.1.12 |
| gnu | nano | 1.1.99pre1:pre1 |
| gnu | nano | 1.1.99pre2:pre2 |
| gnu | nano | 1.1.99pre3:pre3 |
| gnu | nano | 1.2.0 |
| gnu | nano | 1.2.1 |
| gnu | nano | 1.2.2 |
| gnu | nano | 1.2.3 |
| gnu | nano | 1.2.4 |
| gnu | nano | 1.2.5 |
| gnu | nano | 1.3.0 |
| gnu | nano | 1.3.1 |
| gnu | nano | 1.3.2 |
| gnu | nano | 1.3.3 |
| gnu | nano | 1.3.4 |
| gnu | nano | 1.3.5 |
| gnu | nano | 1.3.6 |
| gnu | nano | 1.3.7 |
| gnu | nano | 1.3.8 |
| gnu | nano | 1.3.9 |
| gnu | nano | 1.3.10 |
| gnu | nano | 1.3.11 |
| gnu | nano | 1.3.12 |
| gnu | nano | 1.9.99pre1:pre1 |
| gnu | nano | 1.9.99pre2:pre2 |
| gnu | nano | 1.9.99pre3:pre3 |
| gnu | nano | 2.0.0 |
| gnu | nano | 2.0.1 |
| gnu | nano | 2.0.2 |
| gnu | nano | 2.0.3 |
| gnu | nano | 2.0.4 |
| gnu | nano | 2.0.5 |
| gnu | nano | 2.0.6 |
| gnu | nano | 2.0.7 |
| gnu | nano | 2.0.8 |
| gnu | nano | 2.0.9 |
| gnu | nano | 2.1.0 |
| gnu | nano | 2.1.1 |
| gnu | nano | 2.1.2 |
| gnu | nano | 2.1.3 |
| gnu | nano | 2.1.4 |
| gnu | nano | 2.1.5 |
| gnu | nano | 2.1.6 |
| gnu | nano | 2.1.7 |
| gnu | nano | 2.1.8 |
| gnu | nano | 2.1.9 |
| gnu | nano | 2.1.10 |
| gnu | nano | 2.1.11 |
| gnu | nano | 2.1.99pre1:pre1 |
| gnu | nano | 2.1.99pre2:pre2 |
| gnu | nano | 2.2.0 |
| gnu | nano | 2.2.1 |
| gnu | nano | 2.2.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
References