CVE-2010-0119 Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the command line, which allows local users to obtain sensitive information by listing the process and its argume...
LowCVSS 2.1
EPSS 0.35%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the command line, which allows local users to obtain sensitive information by listing the process and its arguments, related to "echoing."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| becauseinter bournal | <= 1.4 | No fix listed |
| becauseinter bournal | = 0.1 | No fix listed |
| becauseinter bournal | = 0.2 | No fix listed |
| becauseinter bournal | = 0.3 | No fix listed |
| becauseinter bournal | = 0.4 | No fix listed |
| becauseinter bournal | = 0.4.5 | No fix listed |
| becauseinter bournal | = 0.6 | No fix listed |
| becauseinter bournal | = 0.7 | No fix listed |
| becauseinter bournal | = 0.8 | No fix listed |
| becauseinter bournal | = 0.9 | No fix listed |
| becauseinter bournal | = 1.0 | No fix listed |
| becauseinter bournal | = 1.1 | No fix listed |
| becauseinter bournal | = 1.2 | No fix listed |
| becauseinter bournal | = 1.3 | No fix listed |
References
- FEDORA-2010-3301 vendor-advisory
- FEDORA-2010-3221 vendor-advisory
- FEDORA-2010-3168 vendor-advisory
- 38723 third-party-advisory vendor-advisory
- 38814 third-party-advisory
- secunia.com vendor-advisory
- 20100222 Secunia Research: Bournal ccrypt Information Disclosure Security Issue mailing-list
- 38352 vdb-entry