CVE-2024-5742 — Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious…

Affected: nano, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 9, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 6, Red Hat Enterprise Linux 7

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privileges through a malicious symlink.

USN-7064-1 — nano vulnerability

Affected: Ubuntu:Pro:16.04:LTS: nano, Ubuntu:Pro:18.04:LTS: nano, Ubuntu:20.04:LTS: nano, Ubuntu:22.04:LTS: nano, Ubuntu:24.04:LTS: nano

It was discovered that nano allowed a possible privilege escalation through an insecure temporary file. If nano was killed while editing, the permissions granted to the emergency save file could be used by an attacker to escalate privileges using a malicious symlink.

Most recent entries from all

CVE-2024-5742 — Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious…

USN-7064-1 — nano vulnerability