CVE-2010-0119

bournal: updated version 1.4.1 fixes two vulnerabilities

Published Feb 25, 2010 CVSS 2.0 · 2.1 Low EPSS < 1% KEV · Not listed
Description
Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the command line, which allows local users to obtain sensitive information by listing the process and its arguments, related to "echoing."

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2010-0151 Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the command line, which allows local users to obtain sensitive information by listing the process and its arguments, related to "echoing."
Weaknesses

Sources

Status
PUBLISHED
Assigner
flexera
Published
Updated
Aug 7, 2024, 12:37 AM
Reserved
Jan 4, 2010, 12:00 AM
Status
Modified
Published
Feb 25, 2010, 12:30 AM
Modified
Jun 16, 2026, 11:15 PM
Severity
Low
Public date
Feb 22, 2010, 12:00 AM