CVE-2010-1161 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	Primary	3.7 UNKNOWN	LOCAL	HIGH		AV:L/AC:H/Au:N/C:P/I:P/A:P

Base Score

CVSS 3.x

EPSS Score

Percentile: 28%

Affected Products (NVD)

Vendor	Product	Version
gnu	nano	𝑥 ≤ 2.2.3
gnu	nano	0.5.0
gnu	nano	0.5.1
gnu	nano	0.5.2
gnu	nano	0.5.3
gnu	nano	0.5.4
gnu	nano	0.5.5
gnu	nano	0.6.0
gnu	nano	0.6.1
gnu	nano	0.6.2
gnu	nano	0.6.3
gnu	nano	0.6.4
gnu	nano	0.6.5
gnu	nano	0.6.6
gnu	nano	0.6.7
gnu	nano	0.6.8
gnu	nano	0.6.9
gnu	nano	0.7.0
gnu	nano	0.7.1
gnu	nano	0.7.2
gnu	nano	0.7.3
gnu	nano	0.7.4
gnu	nano	0.7.5
gnu	nano	0.7.6
gnu	nano	0.7.7
gnu	nano	0.7.8
gnu	nano	0.7.9
gnu	nano	0.8.0
gnu	nano	0.8.1
gnu	nano	0.8.2
gnu	nano	0.8.3
gnu	nano	0.8.4
gnu	nano	0.8.5
gnu	nano	0.8.6
gnu	nano	0.8.7
gnu	nano	0.8.8
gnu	nano	0.8.9
gnu	nano	0.9.0
gnu	nano	0.9.1
gnu	nano	0.9.2
gnu	nano	0.9.3
gnu	nano	0.9.4
gnu	nano	0.9.5
gnu	nano	0.9.6
gnu	nano	0.9.7
gnu	nano	0.9.8
gnu	nano	0.9.9
gnu	nano	0.9.10
gnu	nano	0.9.11
gnu	nano	0.9.12
gnu	nano	0.9.13
gnu	nano	0.9.14
gnu	nano	0.9.15
gnu	nano	0.9.16
gnu	nano	0.9.17
gnu	nano	0.9.18
gnu	nano	0.9.19
gnu	nano	0.9.20
gnu	nano	0.9.21
gnu	nano	0.9.22
gnu	nano	0.9.23
gnu	nano	0.9.24
gnu	nano	0.9.25
gnu	nano	0.9.99pre1:pre1
gnu	nano	0.9.99pre2:pre2
gnu	nano	0.9.99pre3:pre3
gnu	nano	1.0.0
gnu	nano	1.0.1
gnu	nano	1.0.2
gnu	nano	1.0.3
gnu	nano	1.0.4
gnu	nano	1.0.5
gnu	nano	1.0.6
gnu	nano	1.0.7
gnu	nano	1.0.8
gnu	nano	1.0.9
gnu	nano	1.1.0
gnu	nano	1.1.1
gnu	nano	1.1.2
gnu	nano	1.1.3
gnu	nano	1.1.4
gnu	nano	1.1.5
gnu	nano	1.1.6
gnu	nano	1.1.7
gnu	nano	1.1.8
gnu	nano	1.1.9
gnu	nano	1.1.10
gnu	nano	1.1.11
gnu	nano	1.1.12
gnu	nano	1.1.99pre1:pre1
gnu	nano	1.1.99pre2:pre2
gnu	nano	1.1.99pre3:pre3
gnu	nano	1.2.0
gnu	nano	1.2.1
gnu	nano	1.2.2
gnu	nano	1.2.3
gnu	nano	1.2.4
gnu	nano	1.2.5
gnu	nano	1.3.0
gnu	nano	1.3.1
gnu	nano	1.3.2
gnu	nano	1.3.3
gnu	nano	1.3.4
gnu	nano	1.3.5
gnu	nano	1.3.6
gnu	nano	1.3.7
gnu	nano	1.3.8
gnu	nano	1.3.9
gnu	nano	1.3.10
gnu	nano	1.3.11
gnu	nano	1.3.12
gnu	nano	1.9.99pre1:pre1
gnu	nano	1.9.99pre2:pre2
gnu	nano	1.9.99pre3:pre3
gnu	nano	2.0.0
gnu	nano	2.0.1
gnu	nano	2.0.2
gnu	nano	2.0.3
gnu	nano	2.0.4
gnu	nano	2.0.5
gnu	nano	2.0.6
gnu	nano	2.0.7
gnu	nano	2.0.8
gnu	nano	2.0.9
gnu	nano	2.1.0
gnu	nano	2.1.1
gnu	nano	2.1.2
gnu	nano	2.1.3
gnu	nano	2.1.4
gnu	nano	2.1.5
gnu	nano	2.1.6
gnu	nano	2.1.7
gnu	nano	2.1.8
gnu	nano	2.1.9
gnu	nano	2.1.10
gnu	nano	2.1.11
gnu	nano	2.1.99pre1:pre1
gnu	nano	2.1.99pre2:pre2
gnu	nano	2.2.0
gnu	nano	2.2.1
gnu	nano	2.2.2

𝑥

= Vulnerable software versions

Debian Releases

Debian Product

Codename

nano

bookworm	7.2-1+deb12u1 fixed
bullseye	5.4-2+deb11u3 fixed
sid	8.2-1 fixed
trixie	8.2-1 fixed

Ubuntu Releases

Ubuntu Product

Codename

nano

dapper	ignored
hardy	ignored
intrepid	ignored
jaunty	ignored
karmic	ignored
lucid	ignored
maverick	not-affected
natty	not-affected
oneiric	not-affected
precise	not-affected
quantal	not-affected
raring	not-affected
saucy	not-affected
trusty	not-affected
utopic	not-affected
vivid	not-affected

Common Weakness Enumeration

CWE-362 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
The program contains a code sequence that can run concurrently with other code, and the code sequence requires temporary, exclusive access to a shared resource, but a timing window exists in which the shared resource can be modified by another code sequence that is operating concurrently.

References

http://drosenbe.blogspot.com/2010/03/nano-as-root.html

http://lists.gnu.org/archive/html/nano-devel/2010-04/msg00000.html

http://secunia.com/advisories/39444

http://svn.savannah.gnu.org/viewvc/trunk/nano/ChangeLog?revision=4503&root=nano&view=markup

http://www.openwall.com/lists/oss-security/2010/04/14/4

http://www.securitytracker.com/id?1023891

http://drosenbe.blogspot.com/2010/03/nano-as-root.html

http://lists.gnu.org/archive/html/nano-devel/2010-04/msg00000.html

http://secunia.com/advisories/39444

http://svn.savannah.gnu.org/viewvc/trunk/nano/ChangeLog?revision=4503&root=nano&view=markup

http://www.openwall.com/lists/oss-security/2010/04/14/4

http://www.securitytracker.com/id?1023891