CVE-2010-1160
EPSS 0.04%Published: 4/16/2010Modified: 4/28/2026
Description
GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, which allows local user-assisted attackers to overwrite arbitrary files via a symlink attack on an attacker-owned file that is being edited by the victim.
Affected packages (1)
- Debian/nanofrom 0, < 2.2.4-1