NVD

Id
11694  
Name
CVE-2010-0119  
Description
Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the command line, which allows local users to obtain sensitive information by listing the process and its arguments, related to "echoing."  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-18  
Published
2010-02-24  
Modified Date
2010-03-12  
Seq
2010-0119  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
64249 11694 CVE-2010-0119 FEDORA-2010-3301  View
64250 11694 CVE-2010-0119 FEDORA-2010-3221  View
64251 11694 CVE-2010-0119 FEDORA-2010-3168  View
64252 11694 CVE-2010-0119 20100222 Secunia Research: Bournal ccrypt Information Disclosure Security Issue  View
64253 11694 CVE-2010-0119 38352  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37985 JVNDB-2010-003770 FreeBSD 上の Bournal における重要な情報を取得される脆弱性 FreeBSD 上の Bournal は、-K オプションが使用されている際、コマンドライン上に ccrypt 鍵を配置するため、"エコーを返す" 不備が発生し、重要な情報を取得される脆弱性が存在します。 CVE-2010-0119 42699 CVE-2010-0119 11694 2.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003770.html 2010-02-24 2012-06-26 View