A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the pe…
中危 CVSS 6.7
摘要
A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privileges through a malicious symlink.
中文摘要建设中,暂以英文摘要呈现(DR-003 v2)。
深度研判
该漏洞尚未生成深度研判报告(DR-003 v2 AI pipeline 建设中)。
受影响产品
- :
- :
数据来源
- NVD DATABASE
原始链接
- https://access.redhat.com/errata/RHSA-2024:6986
- https://access.redhat.com/errata/RHSA-2024:9430
- https://access.redhat.com/security/cve/CVE-2024-5742 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2278574 Issue Tracking
- https://access.redhat.com/security/cve/CVE-2024-5742 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=2278574 Issue Tracking
- https://lists.debian.org/debian-lts-announce/2024/06/msg00006.html
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
时间线
- nvd_ingest NVD