CVE-2010-1161: Race Condition
Published Apr 16, 2010
·Updated
Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the ownership of arbitrary files via vectors related to the creation of backup files.
Affected Software
141 affected components
GNU Nano<=2.2.3
GNU Nano=0.5.0
GNU Nano=0.5.1
GNU Nano=0.5.2
GNU Nano=0.5.3
GNU Nano=0.5.4
GNU Nano=0.5.5
GNU Nano=0.6.0
GNU Nano=0.6.1
GNU Nano=0.6.2
GNU Nano=0.6.3
GNU Nano=0.6.4
GNU Nano=0.6.5
GNU Nano=0.6.6
GNU Nano=0.6.7
GNU Nano=0.6.8
GNU Nano=0.6.9
GNU Nano=0.7.0
GNU Nano=0.7.1
GNU Nano=0.7.2
GNU Nano=0.7.3
GNU Nano=0.7.4
GNU Nano=0.7.5
GNU Nano=0.7.6
GNU Nano=0.7.7
GNU Nano=0.7.8
GNU Nano=0.7.9
GNU Nano=0.8.0
GNU Nano=0.8.1
GNU Nano=0.8.2
GNU Nano=0.8.3
GNU Nano=0.8.4
GNU Nano=0.8.5
GNU Nano=0.8.6
GNU Nano=0.8.7
GNU Nano=0.8.8
GNU Nano=0.8.9
GNU Nano=0.9.0
GNU Nano=0.9.1
GNU Nano=0.9.2
GNU Nano=0.9.3
GNU Nano=0.9.4
GNU Nano=0.9.5
GNU Nano=0.9.6
GNU Nano=0.9.7
GNU Nano=0.9.8
GNU Nano=0.9.9
GNU Nano=0.9.10
GNU Nano=0.9.11
GNU Nano=0.9.12
GNU Nano=0.9.13
GNU Nano=0.9.14
GNU Nano=0.9.15
GNU Nano=0.9.16
GNU Nano=0.9.17
GNU Nano=0.9.18
GNU Nano=0.9.19
GNU Nano=0.9.20
GNU Nano=0.9.21
GNU Nano=0.9.22
GNU Nano=0.9.23
GNU Nano=0.9.24
GNU Nano=0.9.25
GNU Nano=0.9.99pre1
GNU Nano=0.9.99pre2
GNU Nano=0.9.99pre3
GNU Nano=1.0.0
GNU Nano=1.0.1
GNU Nano=1.0.2
GNU Nano=1.0.3
GNU Nano=1.0.4
GNU Nano=1.0.5
GNU Nano=1.0.6
GNU Nano=1.0.7
GNU Nano=1.0.8
GNU Nano=1.0.9
GNU Nano=1.1.0
GNU Nano=1.1.1
GNU Nano=1.1.2
GNU Nano=1.1.3
GNU Nano=1.1.4
GNU Nano=1.1.5
GNU Nano=1.1.6
GNU Nano=1.1.7
GNU Nano=1.1.8
GNU Nano=1.1.9
GNU Nano=1.1.10
GNU Nano=1.1.11
GNU Nano=1.1.12
GNU Nano=1.1.99pre1
GNU Nano=1.1.99pre2
GNU Nano=1.1.99pre3
GNU Nano=1.2.0
GNU Nano=1.2.1
GNU Nano=1.2.2
GNU Nano=1.2.3
GNU Nano=1.2.4
GNU Nano=1.2.5
GNU Nano=1.3.0
GNU Nano=1.3.1
GNU Nano=1.3.2
GNU Nano=1.3.3
GNU Nano=1.3.4
GNU Nano=1.3.5
GNU Nano=1.3.6
GNU Nano=1.3.7
GNU Nano=1.3.8
GNU Nano=1.3.9
GNU Nano=1.3.10
GNU Nano=1.3.11
GNU Nano=1.3.12
GNU Nano=1.9.99pre1
GNU Nano=1.9.99pre2
GNU Nano=1.9.99pre3
GNU Nano=2.0.0
GNU Nano=2.0.1
GNU Nano=2.0.2
GNU Nano=2.0.3
GNU Nano=2.0.4
GNU Nano=2.0.5
GNU Nano=2.0.6
GNU Nano=2.0.7
GNU Nano=2.0.8
GNU Nano=2.0.9
GNU Nano=2.1.0
GNU Nano=2.1.1
GNU Nano=2.1.2
GNU Nano=2.1.3
GNU Nano=2.1.4
GNU Nano=2.1.5
GNU Nano=2.1.6
GNU Nano=2.1.7
GNU Nano=2.1.8
GNU Nano=2.1.9
GNU Nano=2.1.10
GNU Nano=2.1.11
GNU Nano=2.1.99pre1
GNU Nano=2.1.99pre2
GNU Nano=2.2.0
GNU Nano=2.2.1
GNU Nano=2.2.2
Event History
Apr 16, 2010
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
via NVD·07:30 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2010-1161?
CVE-2010-1161 is classified as a medium severity vulnerability.
2
How do I fix CVE-2010-1161?
To fix CVE-2010-1161, update GNU nano to version 2.2.4 or later.
3
What type of vulnerability is CVE-2010-1161?
CVE-2010-1161 is a race condition vulnerability.
4
Who is affected by CVE-2010-1161?
Local user-assisted attackers are affected by CVE-2010-1161 when GNU nano is run by root.
5
What are the consequences of CVE-2010-1161?
CVE-2010-1161 allows attackers to change the ownership of arbitrary files through backup file creation.