CVE-2010-0118

Bournal < 1.4.1 - Arbitrary File Overwrite via Symlink Attack on Temporary Files

Title source: llm
STIX 2.1

Description

Bournal before 1.4.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files associated with a --hack_the_gibson update check.

References (8)

Core 8
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/38554
Vendor Advisory x_refsource_misc
http://secunia.com/secunia_research/2010-6/
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/509685/100/0/threaded
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036701.html
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036764.html
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/38814
Mailing List, Third Party Advisory vendor-advisory x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036697.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/38353

Scores

EPSS 0.0032
EPSS Percentile 24.1%

Details

CWE
CWE-59
Status published
Products (14)
becauseinter/bournal 0.1
becauseinter/bournal 0.2
becauseinter/bournal 0.3
becauseinter/bournal 0.4
becauseinter/bournal 0.4.5
becauseinter/bournal 0.6
becauseinter/bournal 0.7
becauseinter/bournal 0.8
becauseinter/bournal 0.9
becauseinter/bournal 1.0
... and 4 more
Published Feb 25, 2010
Tracked Since Feb 18, 2026