« Back to list

CVE-2010-0119

Status: ModifiedLow (2.1)—

Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the command line, which allows local users to obtain sensitive information by listing the process and its arguments, related to "echoing."

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Becauseinter — Bournal

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2010-0119",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 2.1,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.9,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "PSIRT-CNA@flexerasoftware.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-02-25T00:30:00.453",
  "references": [
    {
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036697.html",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036701.html",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036764.html",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://secunia.com/advisories/38723",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://secunia.com/advisories/38814",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://secunia.com/secunia_research/2010-7/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/509688/100/0/threaded",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://www.securityfocus.com/bid/38352",
      "source": "PSIRT-CNA@flexerasoftware.com"
    },
    {
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036697.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036701.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://lists.fedoraproject.org/pipermail/package-announce/2010-March/036764.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/38723",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/38814",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/secunia_research/2010-7/",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/509688/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/38352",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Bournal before 1.4.1 on FreeBSD 8.0, when the -K option is used, places a ccrypt key on the command line, which allows local users to obtain sensitive information by listing the process and its arguments, related to \"echoing.\""
    },
    {
      "lang": "es",
      "value": "Bournal anterior a v1.4.1 sobre FreeBSD v8.0, cuando se usa la opción -K, coloca una clave ccrypt en la línea de comandos que permite a usuarios locales obtener información sensible listando el proceso y sus argumentos. Relacionado con \"echoing\"."
    }
  ],
  "lastModified": "2026-06-16T23:15:30.900",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:becauseinter:bournal:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "7D468CAD-3063-46EB-AE99-F7400BB7B7C5",
              "versionEndIncluding": "1.4"
            },
            {
              "criteria": "cpe:2.3:a:becauseinter:bournal:0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D1709541-EA26-4527-8B4D-331F4085E7E7"
            },
            {
              "criteria": "cpe:2.3:a:becauseinter:bournal:0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0C9498E5-376E-4A41-B399-83285B88925E"
            },
            {
              "criteria": "cpe:2.3:a:becauseinter:bournal:0.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B1F136FE-A8AD-4CF6-8689-110E375E9ADC"
            },
            {
              "criteria": "cpe:2.3:a:becauseinter:bournal:0.4:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BB21BB24-819A-4929-8AAC-E304F8EF2657"
            },
            {
              "criteria": "cpe:2.3:a:becauseinter:bournal:0.4.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69FDF8DB-E4E1-46E0-ACC4-9D57CE0C001F"
            },
            {
              "criteria": "cpe:2.3:a:becauseinter:bournal:0.6:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2CE6BE57-15E3-48E2-871E-63D26E5A9B43"
            },
            {
              "criteria": "cpe:2.3:a:becauseinter:bournal:0.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA9ADE86-B2D7-4F90-9FE2-E944E331DEF5"
            },
            {
              "criteria": "cpe:2.3:a:becauseinter:bournal:0.8:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "095A3649-480E-49D7-9B00-0BBB811A7223"
            },
            {
              "criteria": "cpe:2.3:a:becauseinter:bournal:0.9:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FDD2EA99-A3F1-46AB-954D-67470EBB8AAB"
            },
            {
              "criteria": "cpe:2.3:a:becauseinter:bournal:1.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9FD3F8DD-A9D1-4679-ABF9-0A314578CB9C"
            },
            {
              "criteria": "cpe:2.3:a:becauseinter:bournal:1.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "315AFC7C-956F-49A1-9FDE-490E46FCC53F"
            },
            {
              "criteria": "cpe:2.3:a:becauseinter:bournal:1.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E40B531F-2707-4A4D-A6F3-52A72514E1E7"
            },
            {
              "criteria": "cpe:2.3:a:becauseinter:bournal:1.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "11D63362-6AD3-49F6-9980-D70159F5E8CE"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:freebsd:freebsd:8.0:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3CF1F9EF-01AF-4708-AE02-765360AF3D66"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "PSIRT-CNA@flexerasoftware.com"
}