CVE-2010-1160
EPSS 0.37%
描述
GNU nano before 2.2.4 does not verify whether a file has been changed before it is overwritten in a file-save operation, which allows local user-assisted attackers to overwrite arbitrary files via a symlink attack on an attacker-owned file that is being edited by the victim.
如何修補 CVE-2010-1160
要修補 CVE-2010-1160,請將受影響套件升級到下列已修補版本。
- Debian/nano—升級至 2.2.4-1 或更新版本
CVE-2010-1160 正在被利用嗎?
低 — EPSS 為 0.4%,目前沒有觀察到大規模利用活動。
受影響套件(1)
- from 0, < 2.2.4-1