Local File Overwrite Vulnerability in GNU Nano by GNU

CVE-2010-1160

Summary

GNU Nano prior to version 2.2.4 fails to confirm whether a file has been altered before being overwritten during a file-save procedure. This flaw can be exploited by local user-assisted attackers to execute a symlink attack, permitting the malicious user to overwrite arbitrary files as the victim edits a file. Adequate security measures are essential to safeguard against such vulnerabilities to maintain system integrity.

References