CVE-2010-0119
Bournal < 1.4.1 - Exposure of Sensitive Information via Command Line
Title source: llmDescription
Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the command line, which allows local users to obtain sensitive information by listing the process and its arguments, related to "echoing."
References (8)
Core 8
Core References
Third Party Advisory, VDB Entry mailing-list
x_refsource_bugtraq
http://www.securityfocus.com/archive/1/509688/100/0/threaded
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036701.html
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036764.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/38352
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/38814
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/38723
Mailing List, Third Party Advisory vendor-advisory
x_refsource_fedora
http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036697.html
Vendor Advisory x_refsource_misc
http://secunia.com/secunia_research/2010-7/
Scores
EPSS
0.0035
EPSS Percentile
26.8%
Details
CWE
CWE-200
Status
published
Products (14)
becauseinter/bournal
0.1
becauseinter/bournal
0.2
becauseinter/bournal
0.3
becauseinter/bournal
0.4
becauseinter/bournal
0.4.5
becauseinter/bournal
0.6
becauseinter/bournal
0.7
becauseinter/bournal
0.8
becauseinter/bournal
0.9
becauseinter/bournal
1.0
... and 4 more
Published
Feb 25, 2010
Tracked Since
Feb 18, 2026