NVD

Id
12694  
Name
CVE-2010-1161  
Description
Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the ownership of arbitrary files via vectors related to the creation of backup files.  
Reject
 
CVSS Version
2  
CVSS Score
3.7  
Severity
Low  
CVSS Base Score
3.7  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-18  
Published
2010-04-16  
Modified Date
2010-06-07  
Seq
2010-1161  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
69735 12694 CVE-2010-1161 http://drosenbe.blogspot.com/2010/03/nano-as-root.html  View
69736 12694 CVE-2010-1161 [Nano-devel] 20100407 New prerelease for security tweaks  View
69737 12694 CVE-2010-1161 http://svn.savannah.gnu.org/viewvc/trunk/nano/ChangeLog?revision=4503&root=nano&view=markup  View
69738 12694 CVE-2010-1161 [oss-security] 20100414 CVE request: GNU nano (minor)  View
69739 12694 CVE-2010-1161 1023891  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38157 JVNDB-2010-003942 GNU nano におけるファイルの所有者を変更される脆弱性 GNU nano は、ルートで稼動している際、ルートが所有していないファイルを編集し、競合状態が発生するため、任意のファイルの所有者を変更される脆弱性が存在します。 CVE-2010-1161 43741 CVE-2010-1161 12694 3.7 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003942.html 2010-04-15 2012-06-26 View