The remote host is affected by the vulnerability described in GLSA-201006-08 (nano: Multiple vulnerabilities)

    Multiple race condition vulnerabilities have been discovered in nano.
    For further information please consult the CVE entries referenced     below.
  Impact :

    Under certain conditions, a local, user-assisted attacker could     possibly overwrite arbitrary files via a symlink attack on an     attacker-owned file that is being edited by the victim, or change the     ownership of arbitrary files.
  Workaround :

    There is no known workaround at this time.

The remote Redhat Enterprise Linux 4 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - nano: multiple file editing insecurities (CVE-2010-1160, CVE-2010-1161)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

リモートホストは、GLSA-201006-08 で説明されている脆弱性の影響を受けます（nano：複数の脆弱性）

nano において、複数の競合状態の脆弱性が発見されています。
 詳細については以下に参照されている CVE エントリを参照してください。
 影響：

特定の状況下において、ローカルのユーザーに支援された攻撃者は、被害者が編集中の、攻撃者が所有するファイル上のシンボリックリンク攻撃を使用して、任意のファイルに上書きしたり、あるいは任意のファイルの所有権を変更したりする可能性があります。
 回避策：

現時点で、既知の回避策はありません。

CVE-2010-1160 CVE-2010-1161

注意：Tenable Network Security は、前述の記述ブロックを Fedora セキュリティアドバイザリから直接抽出しています。Tenable では、できる限り新たな問題を持ち込まないように、自動的に整理して書式設定するようにしています。

CVE-2010-1160 CVE-2010-1161

請注意，Tenable Network Security 已直接從 Fedora 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

The remote Redhat Enterprise Linux 3 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - nano: multiple file editing insecurities (CVE-2010-1160, CVE-2010-1161)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

CVE-2010-1160 CVE-2010-1161

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 5 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched.

  - nano: multiple file editing insecurities (CVE-2010-1160, CVE-2010-1161)

Note that Nessus has not tested for these issues but has instead relied on the package manager's report that the package is installed.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
46775	GLSA-201006-08 : nano: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2010/6/2	2021/1/6	low
198444	RHEL 4 : nano (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	medium
46775	GLSA-201006-08：nano：複数の脆弱性	Nessus	Gentoo Local Security Checks	2010/6/2	2021/1/6	low
47452	Fedora 11：nano-2.0.9-1.fc11（2010-6776）	Nessus	Fedora Local Security Checks	2010/7/1	2021/1/11	low
47451	Fedora 12：nano-2.0.9-6.fc12 (2010-6775)	Nessus	Fedora Local Security Checks	2010/7/1	2021/1/11	low
198355	RHEL 3 : nano (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	medium
47452	Fedora 11 : nano-2.0.9-1.fc11 (2010-6776)	Nessus	Fedora Local Security Checks	2010/7/1	2021/1/11	low
47447	Fedora 13：nano-2.2.4-1.fc13（2010-6735）	Nessus	Fedora Local Security Checks	2010/7/1	2021/1/11	low
47451	Fedora 12：nano-2.0.9-6.fc12（2010-6775）	Nessus	Fedora Local Security Checks	2010/7/1	2021/1/11	low
49153	Fedora 12：nano-2.0.9-7.fc12（2010-13157）	Nessus	Fedora Local Security Checks	2010/9/9	2021/1/11	low
198367	RHEL 5 : nano (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	2024/6/3	2024/6/3	medium
49153	Fedora 12 : nano-2.0.9-7.fc12 (2010-13157)	Nessus	Fedora Local Security Checks	2010/9/9	2021/1/11	low
47447	Fedora 13 : nano-2.2.4-1.fc13 (2010-6735)	Nessus	Fedora Local Security Checks	2010/7/1	2021/1/11	low
47451	Fedora 12 : nano-2.0.9-6.fc12 (2010-6775)	Nessus	Fedora Local Security Checks	2010/7/1	2021/1/11	low

检测

插件搜索

low

medium

low

low

low

medium

low

low

low

low

medium

low

low

low