CVE-2010-1160: Low severity GNU Nano vulnerability

Q: What is the severity of CVE-2010-1160?

The severity of CVE-2010-1160 is classified as medium, due to its potential for local user-assisted exploitation.

Q: How do I fix CVE-2010-1160?

To fix CVE-2010-1160, update to GNU nano version 2.2.4 or later, where the vulnerability has been addressed.

Q: What systems are affected by CVE-2010-1160?

CVE-2010-1160 affects multiple versions of GNU nano including versions from 0.5.0 up to 2.2.3.

Q: What type of attack is associated with CVE-2010-1160?

CVE-2010-1160 is associated with a symlink attack that allows local user-assisted attackers to overwrite arbitrary files.

Q: Is CVE-2010-1160 a remote or local vulnerability?

CVE-2010-1160 is a local vulnerability that requires user interaction for exploitation.

Published Apr 16, 2010

Updated

GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, which allows local user-assisted attackers to overwrite arbitrary files via a symlink attack on an attacker-owned file that is being edited by the victim.

Affected Software

141 affected components

GNU Nano=0.9.99pre2

GNU Nano=0.8.0

GNU Nano=1.1.2

GNU Nano=2.1.7

GNU Nano=1.9.99pre1

GNU Nano=2.1.8

GNU Nano=1.1.12

GNU Nano=1.9.99pre2

GNU Nano=1.1.4

GNU Nano=1.1.3

GNU Nano=0.7.4

GNU Nano=0.9.4

GNU Nano=0.9.1

GNU Nano=1.1.7

GNU Nano=0.9.99pre1

GNU Nano=1.1.0

GNU Nano=2.2.2

GNU Nano=1.0.3

GNU Nano=0.8.6

GNU Nano=2.0.6

GNU Nano=2.1.0

GNU Nano=2.0.1

GNU Nano=0.9.22

GNU Nano<=2.2.3

GNU Nano=0.6.1

GNU Nano=1.3.7

GNU Nano=0.5.5

GNU Nano=0.8.2

GNU Nano=0.8.9

GNU Nano=0.9.99pre3

GNU Nano=0.9.9

GNU Nano=0.9.15

GNU Nano=2.0.3

GNU Nano=0.9.7

GNU Nano=1.3.8

GNU Nano=0.7.1

GNU Nano=1.0.2

GNU Nano=2.1.5

GNU Nano=2.0.5

GNU Nano=0.8.8

GNU Nano=1.0.4

GNU Nano=1.1.99pre3

GNU Nano=0.6.4

GNU Nano=2.1.99pre2

GNU Nano=0.9.12

GNU Nano=2.1.11

GNU Nano=0.8.3

GNU Nano=0.9.25

GNU Nano=1.1.5

GNU Nano=0.9.0

GNU Nano=1.0.0

GNU Nano=1.9.99pre3

GNU Nano=1.3.9

GNU Nano=0.7.0

GNU Nano=1.0.9

GNU Nano=2.1.1

GNU Nano=0.7.7

GNU Nano=1.2.0

GNU Nano=1.0.1

GNU Nano=0.6.5

GNU Nano=0.5.3

GNU Nano=2.1.99pre1

GNU Nano=0.9.24

GNU Nano=0.9.13

GNU Nano=2.0.7

GNU Nano=2.0.8

GNU Nano=2.0.0

GNU Nano=1.3.0

GNU Nano=0.9.23

GNU Nano=1.2.3

GNU Nano=1.1.9

GNU Nano=0.8.5

GNU Nano=1.3.3

GNU Nano=0.9.18

GNU Nano=0.6.6

GNU Nano=2.2.1

GNU Nano=0.5.0

GNU Nano=0.6.0

GNU Nano=2.1.2

GNU Nano=0.7.9

GNU Nano=2.1.4

GNU Nano=1.3.11

GNU Nano=0.7.3

GNU Nano=0.8.4

GNU Nano=1.3.2

GNU Nano=0.7.6

GNU Nano=1.2.2

GNU Nano=1.2.5

GNU Nano=0.5.1

GNU Nano=0.9.11

GNU Nano=1.3.4

GNU Nano=0.9.17

GNU Nano=1.0.5

GNU Nano=1.1.11

GNU Nano=0.5.2

GNU Nano=2.0.2

GNU Nano=0.9.6

GNU Nano=1.1.99pre2

GNU Nano=1.1.10

GNU Nano=0.6.7

GNU Nano=0.9.3

GNU Nano=1.0.7

GNU Nano=0.9.14

GNU Nano=1.1.6

GNU Nano=0.6.2

GNU Nano=0.7.8

GNU Nano=1.3.12

GNU Nano=2.1.3

GNU Nano=0.8.7

GNU Nano=0.5.4

GNU Nano=1.1.1

GNU Nano=1.2.4

GNU Nano=0.6.8

GNU Nano=2.1.6

GNU Nano=0.9.8

GNU Nano=0.6.9

GNU Nano=1.3.6

GNU Nano=0.9.19

GNU Nano=0.9.5

GNU Nano=0.9.21

GNU Nano=0.9.2

GNU Nano=1.0.8

GNU Nano=1.0.6

GNU Nano=1.3.10

GNU Nano=2.1.9

GNU Nano=2.0.4

GNU Nano=2.2.0

GNU Nano=2.1.10

GNU Nano=1.1.99pre1

GNU Nano=1.1.8

GNU Nano=0.9.20

GNU Nano=0.8.1

GNU Nano=1.3.5

GNU Nano=1.3.1

GNU Nano=0.9.10

GNU Nano=0.7.2

GNU Nano=2.0.9

GNU Nano=0.9.16

GNU Nano=0.6.3

GNU Nano=0.7.5

GNU Nano=1.2.1

Event History

Apr 16, 2010

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Data Sourced

via NVD·07:30 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2010-1160?

The severity of CVE-2010-1160 is classified as medium, due to its potential for local user-assisted exploitation.

How do I fix CVE-2010-1160?

To fix CVE-2010-1160, update to GNU nano version 2.2.4 or later, where the vulnerability has been addressed.

What systems are affected by CVE-2010-1160?

CVE-2010-1160 affects multiple versions of GNU nano including versions from 0.5.0 up to 2.2.3.

What type of attack is associated with CVE-2010-1160?

CVE-2010-1160 is associated with a symlink attack that allows local user-assisted attackers to overwrite arbitrary files.

Is CVE-2010-1160 a remote or local vulnerability?