VULNERABILITY INTELLIGENCE

CVE-2010-1161

CVSS score3.7 LOW
EPSS probability0.28%
CISA KEVNot currently listed
Published2010-04-16
Last modified2026-06-16
CVSS vectorAV:L/AC:H/Au:N/C:P/I:P/A:P

Description

Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the ownership of arbitrary files via vectors related to the creation of backup files.

Weakness classification

  • CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')

Primary references