CVE-2010-0119
Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the command line, which allows local users to obtain sensitive information by listing the process and its arguments, related to "echoing."
- EPSS
- 0.3% chance of exploitation in the next 30 days; higher than 28% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- becauseinter:bournal
References
- http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036697.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036701.html
- http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036764.html
- http://secunia.com/advisories/38723
- http://secunia.com/advisories/38814