CVE-2010-0118

Bournal before 1.4.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files associated with a --hackthegibson update check...

CVE-2010-0119

Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the command line, which allows local users to obtain sensitive information by listing the process and its arguments, related to "echoing."...

CVE-2010-0119

CVE-2010-0119 affects Bournal up to version 1.4.1 for FreeBSD 8.0 when the -K option is used. The vulnerability stems from placing the ccrypt key on the command line, enabling a local attacker to obtain sensitive information by listing the process and its arguments (echoing). Connected Fedora adv...

CVE-2010-0118

CVE-2010-0118 concerns the bournal utility. Public details show that a vulnerability existed in bournal before version 1.4.1 where local users could overwrite arbitrary files via a symlink attack on temporary files used during an update check. The Fedora advisories and OpenVAS entries confirm aff...

Secunia Research: Bournal Insecure Temporary Files Security Issue

====================================================================== Secunia Research 22/02/2010 - Bournal Insecure Temporary Files Security Issue - ====================================================================== Table of Contents Affected...

Secunia Research: Bournal ccrypt Information Disclosure Security Issue

====================================================================== Secunia Research 22/02/2010 - Bournal ccrypt Information Disclosure Security Issue - ====================================================================== Table of Contents Affected...

CVE-2010-0119: Exposure of Sensitive Information to an Unauthorized Actor

Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the command line, which allows local users to obtain sensitive information by listing the process and its arguments, related to "echoing."...