GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, which allows local user-assisted attackers to overwrite arbitrary files via a symlink attack on an attacker-owned file that is being edited by the victim.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-     save operation, which allows local user-assisted attackers to overwrite arbitrary files via a symlink     attack on an attacker-owned file that is being edited by the victim. (CVE-2010-1160)

Note that Nessus relies on the presence of the package as reported by the vendor.

CVE-2010-1160 CVE-2010-1161

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote host is affected by the vulnerability described in GLSA-201006-08 (nano: Multiple vulnerabilities)

    Multiple race condition vulnerabilities have been discovered in nano.
    For further information please consult the CVE entries referenced     below.
  Impact :

    Under certain conditions, a local, user-assisted attacker could     possibly overwrite arbitrary files via a symlink attack on an     attacker-owned file that is being edited by the victim, or change the     ownership of arbitrary files.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
217120	Linux Distros Unpatched Vulnerability : CVE-2010-1160	Nessus	Misc.	critical
49153	Fedora 12 : nano-2.0.9-7.fc12 (2010-13157)	Nessus	Fedora Local Security Checks	low
47452	Fedora 11 : nano-2.0.9-1.fc11 (2010-6776)	Nessus	Fedora Local Security Checks	low
47451	Fedora 12 : nano-2.0.9-6.fc12 (2010-6775)	Nessus	Fedora Local Security Checks	low
47447	Fedora 13 : nano-2.2.4-1.fc13 (2010-6735)	Nessus	Fedora Local Security Checks	low
46775	GLSA-201006-08 : nano: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	low

Detections

Analytics

CVE-2010-1160

critical

Tenable Plugins

critical

low

low

low

low

low