CVE-2010-0118: Low severity Becauseinter Bournal vulnerability
Published Feb 25, 2010
·Updated
Bournal before 1.4.1 allows local users to overwrite arbitrary files via a symlink attack on unspecified temporary files associated with a --hackthegibson update check.
Affected Software
14 affected components
Becauseinter Bournal=1.1
Becauseinter Bournal=0.4.5
Becauseinter Bournal=0.4
Becauseinter Bournal=0.3
Becauseinter Bournal=0.7
Becauseinter Bournal=1.2
Becauseinter Bournal=0.1
Becauseinter Bournal=0.2
Becauseinter Bournal<=1.4
Becauseinter Bournal=0.8
Becauseinter Bournal=1.3
Becauseinter Bournal=0.6
Becauseinter Bournal=1.0
Becauseinter Bournal=0.9
Event History
Feb 25, 2010
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·12:30 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What systems are affected by CVE-2010-0118?
CVE-2010-0118 affects various versions of Bournal, specifically those prior to 1.4.1.
2
What type of attack is associated with CVE-2010-0118?
CVE-2010-0118 is associated with a symlink attack that allows local users to overwrite arbitrary files.
3
What is the impact of CVE-2010-0118 on affected systems?
The impact of CVE-2010-0118 is that local users can exploit the vulnerability to overwrite arbitrary files, potentially compromising system integrity.
4
How can I mitigate CVE-2010-0118?
To mitigate CVE-2010-0118, update Bournal to version 1.4.1 or later.
5
Was CVE-2010-0118 disclosed in a security advisory?
Yes, CVE-2010-0118 has been disclosed in various security advisories, detailing the vulnerability's nature and impacts.