CVE-2010-1161 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	3.7 UNKNOWN	LOCAL	HIGH		AV:L/AC:H/Au:N/C:P/I:P/A:P
redhat	CNA	---				---
CVE	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 15%

Vendor	Product	Version
gnu	nano	𝑥 ≤ 2.2.3
gnu	nano	0.5.0
gnu	nano	0.5.1
gnu	nano	0.5.2
gnu	nano	0.5.3
gnu	nano	0.5.4
gnu	nano	0.5.5
gnu	nano	0.6.0
gnu	nano	0.6.1
gnu	nano	0.6.2
gnu	nano	0.6.3
gnu	nano	0.6.4
gnu	nano	0.6.5
gnu	nano	0.6.6
gnu	nano	0.6.7
gnu	nano	0.6.8
gnu	nano	0.6.9
gnu	nano	0.7.0
gnu	nano	0.7.1
gnu	nano	0.7.2
gnu	nano	0.7.3
gnu	nano	0.7.4
gnu	nano	0.7.5
gnu	nano	0.7.6
gnu	nano	0.7.7
gnu	nano	0.7.8
gnu	nano	0.7.9
gnu	nano	0.8.0
gnu	nano	0.8.1
gnu	nano	0.8.2
gnu	nano	0.8.3
gnu	nano	0.8.4
gnu	nano	0.8.5
gnu	nano	0.8.6
gnu	nano	0.8.7
gnu	nano	0.8.8
gnu	nano	0.8.9
gnu	nano	0.9.0
gnu	nano	0.9.1
gnu	nano	0.9.2
gnu	nano	0.9.3
gnu	nano	0.9.4
gnu	nano	0.9.5
gnu	nano	0.9.6
gnu	nano	0.9.7
gnu	nano	0.9.8
gnu	nano	0.9.9
gnu	nano	0.9.10
gnu	nano	0.9.11
gnu	nano	0.9.12
gnu	nano	0.9.13
gnu	nano	0.9.14
gnu	nano	0.9.15
gnu	nano	0.9.16
gnu	nano	0.9.17
gnu	nano	0.9.18
gnu	nano	0.9.19
gnu	nano	0.9.20
gnu	nano	0.9.21
gnu	nano	0.9.22
gnu	nano	0.9.23
gnu	nano	0.9.24
gnu	nano	0.9.25
gnu	nano	0.9.99pre1:pre1
gnu	nano	0.9.99pre2:pre2
gnu	nano	0.9.99pre3:pre3
gnu	nano	1.0.0
gnu	nano	1.0.1
gnu	nano	1.0.2
gnu	nano	1.0.3
gnu	nano	1.0.4
gnu	nano	1.0.5
gnu	nano	1.0.6
gnu	nano	1.0.7
gnu	nano	1.0.8
gnu	nano	1.0.9
gnu	nano	1.1.0
gnu	nano	1.1.1
gnu	nano	1.1.2
gnu	nano	1.1.3
gnu	nano	1.1.4
gnu	nano	1.1.5
gnu	nano	1.1.6
gnu	nano	1.1.7
gnu	nano	1.1.8
gnu	nano	1.1.9
gnu	nano	1.1.10
gnu	nano	1.1.11
gnu	nano	1.1.12
gnu	nano	1.1.99pre1:pre1
gnu	nano	1.1.99pre2:pre2
gnu	nano	1.1.99pre3:pre3
gnu	nano	1.2.0
gnu	nano	1.2.1
gnu	nano	1.2.2
gnu	nano	1.2.3
gnu	nano	1.2.4
gnu	nano	1.2.5
gnu	nano	1.3.0
gnu	nano	1.3.1
gnu	nano	1.3.2
gnu	nano	1.3.3
gnu	nano	1.3.4
gnu	nano	1.3.5
gnu	nano	1.3.6
gnu	nano	1.3.7
gnu	nano	1.3.8
gnu	nano	1.3.9
gnu	nano	1.3.10
gnu	nano	1.3.11
gnu	nano	1.3.12
gnu	nano	1.9.99pre1:pre1
gnu	nano	1.9.99pre2:pre2
gnu	nano	1.9.99pre3:pre3
gnu	nano	2.0.0
gnu	nano	2.0.1
gnu	nano	2.0.2
gnu	nano	2.0.3
gnu	nano	2.0.4
gnu	nano	2.0.5
gnu	nano	2.0.6
gnu	nano	2.0.7
gnu	nano	2.0.8
gnu	nano	2.0.9
gnu	nano	2.1.0
gnu	nano	2.1.1
gnu	nano	2.1.2
gnu	nano	2.1.3
gnu	nano	2.1.4
gnu	nano	2.1.5
gnu	nano	2.1.6
gnu	nano	2.1.7
gnu	nano	2.1.8
gnu	nano	2.1.9
gnu	nano	2.1.10
gnu	nano	2.1.11
gnu	nano	2.1.99pre1:pre1
gnu	nano	2.1.99pre2:pre2
gnu	nano	2.2.0
gnu	nano	2.2.1
gnu	nano	2.2.2

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

nano

bullseye	5.4-2+deb11u3 fixed
bookworm	7.2-1+deb12u1 fixed
sid	8.2-1 fixed
trixie	8.2-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

nano

vivid	not-affected
utopic	not-affected
trusty	not-affected
saucy	not-affected
raring	not-affected
quantal	not-affected
precise	not-affected
oneiric	not-affected
natty	not-affected
maverick	not-affected
lucid	ignored
karmic	ignored
jaunty	ignored
intrepid	ignored
hardy	ignored
dapper	ignored

Common Weakness Enumeration

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References

http://drosenbe.blogspot.com/2010/03/nano-as-root.html

http://lists.gnu.org/archive/html/nano-devel/2010-04/msg00000.html

http://secunia.com/advisories/39444

http://svn.savannah.gnu.org/viewvc/trunk/nano/ChangeLog?revision=4503&root=nano&view=markup

http://www.openwall.com/lists/oss-security/2010/04/14/4

http://www.securitytracker.com/id?1023891

http://drosenbe.blogspot.com/2010/03/nano-as-root.html

http://lists.gnu.org/archive/html/nano-devel/2010-04/msg00000.html

http://secunia.com/advisories/39444

http://svn.savannah.gnu.org/viewvc/trunk/nano/ChangeLog?revision=4503&root=nano&view=markup

http://www.openwall.com/lists/oss-security/2010/04/14/4

http://www.securitytracker.com/id?1023891