CVE-2010-0118 Bournal before 1.4.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files associated with a --hack_the_gibson update check.
LowCVSS 3.3
EPSS 0.33%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Bournal before 1.4.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files associated with a --hack_the_gibson update check.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| becauseinter bournal | <= 1.4 | No fix listed |
| becauseinter bournal | = 0.1 | No fix listed |
| becauseinter bournal | = 0.2 | No fix listed |
| becauseinter bournal | = 0.3 | No fix listed |
| becauseinter bournal | = 0.4 | No fix listed |
| becauseinter bournal | = 0.4.5 | No fix listed |
| becauseinter bournal | = 0.6 | No fix listed |
| becauseinter bournal | = 0.7 | No fix listed |
| becauseinter bournal | = 0.8 | No fix listed |
| becauseinter bournal | = 0.9 | No fix listed |
| becauseinter bournal | = 1.0 | No fix listed |
| becauseinter bournal | = 1.1 | No fix listed |
| becauseinter bournal | = 1.2 | No fix listed |
| becauseinter bournal | = 1.3 | No fix listed |
References
- FEDORA-2010-3301 vendor-advisory
- FEDORA-2010-3221 vendor-advisory
- FEDORA-2010-3168 vendor-advisory
- 38554 third-party-advisory vendor-advisory
- 38814 third-party-advisory
- secunia.com vendor-advisory
- 20100222 Secunia Research: Bournal Insecure Temporary Files Security Issue mailing-list
- 38353 vdb-entry