nano
Page content
- Author: Miklos Vajna
- Vulnerable: 2.0.9-1
- Unaffected: 2.0.9-2locris1
Some security issues have been reported in GNU nano, which can be exploited by malicious, local users to perform certain actions with escalated privileges.
- The application does not properly verify if the file currently being edited has been changed outside the context of the current editing session before writing to it, which can be exploited to e.g. overwrite arbitrary files via symlink attacks.
- A race condition exists when creating backup files, which can be exploited to take the ownership of arbitrary files via e.g. symlink attacks. Successful exploitation requires that the victim is tricked into editing files owned by the attacker and that the backup functionality is enabled.
- Bug Tracker URL: http://bugs.frugalware.org/task/4196