2010-04-16 21:30:00 2010-06-07 06:00:00

Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the ownership of arbitrary files via vectors related to the creation of backup files.

Vector

LOCAL

Complexity

HIGH

Authentication

NONE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
Gnu Nano 2.1.0 (not an official CPE) Gnu Nano 2.1.2 (not an official CPE) Gnu Nano 2.1.1 (not an official CPE) Gnu Nano 2.1.4 (not an official CPE) Gnu Nano 2.1.3 (not an official CPE) Gnu Nano 1.3.8 (not an official CPE) Gnu Nano 2.1.6 (not an official CPE) Gnu Nano 1.3.9 (not an official CPE) Gnu Nano 2.1.5 (not an official CPE) Gnu Nano 2.1.8 (not an official CPE) Gnu Nano 2.1.7 (not an official CPE) Gnu Nano 0.9.14 (not an official CPE) Gnu Nano 0.9.15 (not an official CPE) Gnu Nano 0.5.0 (not an official CPE) Gnu Nano 0.9.16 (not an official CPE) Gnu Nano 0.9.17 (not an official CPE) Gnu Nano 0.5.2 (not an official CPE) Gnu Nano 0.9.18 (not an official CPE) Gnu Nano 0.5.1 (not an official CPE) Gnu Nano 0.9.19 (not an official CPE) Gnu Nano 0.5.4 (not an official CPE) Gnu Nano 0.5.3 (not an official CPE) Gnu Nano 0.5.5 (not an official CPE) Gnu Nano 0.7.9 (not an official CPE) Gnu Nano 0.9.0 (not an official CPE) Gnu Nano 0.7.7 (not an official CPE) Gnu Nano 0.7.8 (not an official CPE) Gnu Nano 0.7.5 (not an official CPE) Gnu Nano 0.7.6 (not an official CPE) Gnu Nano 0.9.11 (not an official CPE) Gnu Nano 0.9.10 (not an official CPE) Gnu Nano 0.9.1 (not an official CPE) Gnu Nano 0.9.13 (not an official CPE) Gnu Nano 0.9.2 (not an official CPE) Gnu Nano 0.9.12 (not an official CPE) Gnu Nano 1.2.3 (not an official CPE) Gnu Nano 1.1.3 (not an official CPE) Gnu Nano 1.2.4 (not an official CPE) Gnu Nano 1.1.2 (not an official CPE) Gnu Nano 0.9.9 (not an official CPE) Gnu Nano 0.6.6 (not an official CPE) Gnu Nano 1.2.5 (not an official CPE) Gnu Nano 1.1.1 (not an official CPE) Gnu Nano 0.6.7 (not an official CPE) Gnu Nano 1.1.0 (not an official CPE) Gnu Nano 0.6.8 (not an official CPE) Gnu Nano 1.1.7 (not an official CPE) Gnu Nano 0.6.9 (not an official CPE) Gnu Nano 1.2.0 (not an official CPE) Gnu Nano 1.1.6 (not an official CPE) Gnu Nano 1.2.1 (not an official CPE) Gnu Nano 1.1.5 (not an official CPE) Gnu Nano 0.9.25 (not an official CPE) Gnu Nano 1.2.2 (not an official CPE) Gnu Nano 1.1.4 (not an official CPE) Gnu Nano 1.0.9 (not an official CPE) Gnu Nano 1.0.8 (not an official CPE) Gnu Nano 1.0.7 (not an official CPE) Gnu Nano 1.1.9 (not an official CPE) Gnu Nano 1.0.6 (not an official CPE) Gnu Nano 1.1.8 (not an official CPE) Gnu Nano 1.0.5 (not an official CPE) Gnu Nano 1.0.4 (not an official CPE) Gnu Nano 1.0.3 (not an official CPE) Gnu Nano 1.0.2 (not an official CPE) Gnu Nano 1.0.1 (not an official CPE) Gnu Nano 1.0.0 (not an official CPE) Gnu Nano 0.9.24 (not an official CPE) Gnu Nano 0.9.23 (not an official CPE) Gnu Nano 0.8.5 (not an official CPE) Gnu Nano 0.9.22 (not an official CPE) Gnu Nano 0.8.4 (not an official CPE) Gnu Nano 0.9.21 (not an official CPE) Gnu Nano 0.8.7 (not an official CPE) Gnu Nano 1.3.11 (not an official CPE) Gnu Nano 0.9.20 (not an official CPE) Gnu Nano 0.8.6 (not an official CPE) Gnu Nano 1.3.12 (not an official CPE) Gnu Nano 0.8.9 (not an official CPE) Gnu Nano 0.8.8 (not an official CPE) Gnu Nano 1.3.10 (not an official CPE) Gnu Nano 0.7.3 (not an official CPE) Gnu Nano 0.7.4 (not an official CPE) Gnu Nano 2.1.10 (not an official CPE) Gnu Nano 2.1.11 (not an official CPE) Gnu Nano 0.9.3 (not an official CPE) Gnu Nano 0.9.4 (not an official CPE) Gnu Nano 0.7.1 (not an official CPE) Gnu Nano 0.9.7 (not an official CPE) Gnu Nano 0.7.2 (not an official CPE) Gnu Nano 0.9.8 (not an official CPE) Gnu Nano 0.9.5 (not an official CPE) Gnu Nano 0.7.0 (not an official CPE) Gnu Nano 0.9.6 (not an official CPE) Gnu Nano 0.6.1 (not an official CPE) Gnu Nano 0.6.0 (not an official CPE) Gnu Nano 0.6.3 (not an official CPE) Gnu Nano 0.6.2 (not an official CPE) Gnu Nano 1.1.11 (not an official CPE) Gnu Nano 1.1.12 (not an official CPE) Gnu Nano 0.6.5 (not an official CPE) Gnu Nano 0.6.4 (not an official CPE) Gnu Nano 1.1.10 (not an official CPE) Gnu Nano 1.3.0 (not an official CPE) Gnu Nano 1.3.1 (not an official CPE) Gnu Nano 1.1.99pre3 (not an official CPE) Gnu Nano 1.3.2 (not an official CPE) Gnu Nano 1.1.99pre2 (not an official CPE) Gnu Nano 1.3.3 (not an official CPE) Gnu Nano 1.1.99pre1 (not an official CPE) Gnu Nano 1.3.4 (not an official CPE) Gnu Nano 1.3.5 (not an official CPE) Gnu Nano 2.1.9 (not an official CPE) Gnu Nano 1.3.6 (not an official CPE) Gnu Nano 1.3.7 (not an official CPE) Gnu Nano 2.2.3 (not an official CPE) Gnu Nano 0.9.99pre3 (not an official CPE) Gnu Nano 2.2.2 (not an official CPE) Gnu Nano 0.9.99pre2 (not an official CPE) Gnu Nano 0.8.2 (not an official CPE) Gnu Nano 0.8.3 (not an official CPE) Gnu Nano 2.2.1 (not an official CPE) Gnu Nano 0.9.99pre1 (not an official CPE) Gnu Nano 2.2.0 (not an official CPE) Gnu Nano 0.8.0 (not an official CPE) Gnu Nano 0.8.1 (not an official CPE) Gnu Nano 2.0.5 (not an official CPE) Gnu Nano 2.0.4 (not an official CPE) Gnu Nano 2.0.7 (not an official CPE) Gnu Nano 2.0.6 (not an official CPE) Gnu Nano 2.0.1 (not an official CPE) Gnu Nano 2.0.0 (not an official CPE) Gnu Nano 2.0.3 (not an official CPE) Gnu Nano 2.0.2 (not an official CPE) Gnu Nano 1.9.99pre3 (not an official CPE) Gnu Nano 1.9.99pre2 (not an official CPE) Gnu Nano 2.1.99pre2 (not an official CPE) Gnu Nano 2.0.9 (not an official CPE) Gnu Nano 1.9.99pre1 (not an official CPE) Gnu Nano 2.0.8 (not an official CPE) Gnu Nano 2.1.99pre1 (not an official CPE)