CVE-2010-1161
Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by...
Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the ownership of arbitrary files via vectors related to the creation of backup files.
Exploit likelihood
What each source reports
NVD Score used
Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the ownership of arbitrary files via vectors related to the creation of backup files.
- Record
CVE-2010-1161- CVSS 2.0
- 3.7 Low
AV:L/AC:H/Au:N/C:P/I:P/A:P - Weakness
- CWE-362
- Updated
- 2026-11-02
CVE List No score
Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the ownership of arbitrary files via vectors related to the creation of backup files.
- Record
CVE-2010-1161- Updated
- 2026-11-02
EUVDEUVD-2010-1191 No score
Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the ownership of arbitrary files via vectors related to the creation of backup files.
- Record
EUVD-2010-1191- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q9pv-rh5p-8836 No score
Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by...
Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the ownership of arbitrary files via vectors related to the creation of backup files.
- Record
GHSA-q9pv-rh5p-8836- Weakness
- CWE-362
- Updated
- 2026-11-02
OSV No score
Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the ownership of arbitrary files via vectors related to the creation of backup files.
- Record
CVE-2010-1161- Updated
- 2026-11-02
OSVDEBIAN-CVE-2010-1161 No score
Race condition in GNU nano before 2.2.4, when run by root to edit a file that is not owned by root, allows local user-assisted attackers to change the ownership of arbitrary files via vectors related to the creation of backup files.
- Record
DEBIAN-CVE-2010-1161- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10435-1 No score
nano-2.7.1-1.1 on GA media
These are all security issues fixed in the nano-2.7.1-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10435-1- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-1161 is a low vulnerability (CVSS 3.7) in Gnu Nano, published April 16, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.28%, the 20th percentile. Fixed in nano 2.2.4-1.
