A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privileges through a malicious symlink.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: redhat
Published: 2024-06-12T08:53:02.256Z
Updated: 2024-06-12T08:53:02.256Z
Reserved: 2024-06-07T12:22:38.441Z
Link: CVE-2024-5742
JSON object: View
NVD Information
Status : Awaiting Analysis
Published: 2024-06-12T09:15:23.037
Modified: 2024-06-17T12:15:49.850
Link: CVE-2024-5742
JSON object: View
Redhat Information
No data.
CWE