bugGNU nano - Bugs: bug #58632, in restricted mode, nano can leak...

 
 

You are not allowed to post comments on this tracker with your current authentication level.

bug #58632: in restricted mode, nano can leak information about the file system

Submitter:  Benno Schulenberg <bens>
Submitted:  Sat 20 Jun 2020 12:43:57 PM UTC
   
 
Severity:  2 - Minor Status:  Fixed
Assigned to:  bens Open/Closed:  Closed

Sat 20 Jun 2020 01:03:27 PM UTC, comment #1: 

Fixed in git, commit a13b0bc8.

Benno Schulenberg <bens>
Group administrator
Sat 20 Jun 2020 12:43:57 PM UTC, original submission:  

To reproduce, run 'src/nano --restrict'.
Then type: some text ^O <Tab><Tab>
See that a list (or partial list) of the files in the current directory is shown.  Note that in the ^O WriteOut menu, the ^T Browser shortcut is not available -- apparently the intent is to disallow the user to inspect the file system.  But now, with <Tab><Tab>, the user can get at least a partial list of the files in each directory of the file system (because they can type as many times as they like: /some/path <Tab><Tab>).  :|

Of course, this tabbing to inspect the file system only works when restricted mode is started without any file name, but still.

Expected behavior: in restricted mode, tabbing should be disallowed entirely.

Of course, also without tabbing the user can gain information about the file system, by trying every possible name that they are interested in and see if nano refuses to overwrite the file.  But that is much more laborious, AND as soon as a write succeeds, the user may not change the name any more and they would need to restart nano (which they probably are not at liberty to do).

Benno Schulenberg <bens>
Group administrator

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by bens (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

     

    Follow 2 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2020-07-30 bens Open/ClosedOpen Closed
    2020-06-20 bens StatusNone Fixed

    Back to the top

    Powered by Savane 3.13-f8d8.
    Corresponding source code