Bournal ccrypt Utility Local Information Disclosure Vulnerability
BID:38352
Info
Bournal ccrypt Utility Local Information Disclosure Vulnerability
| Bugtraq ID: | 38352 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: |
CVE-2010-0119 |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 22 2010 12:00AM |
| Updated: | Apr 13 2015 09:22PM |
| Credit: | Discovered by Secunia Research |
| Vulnerable: |
Bournal Bournal 1.4 |
| Not Vulnerable: |
Bournal Bournal 1.4.1 |
Discussion
Bournal ccrypt Utility Local Information Disclosure Vulnerability
Bournal 'ccrypt' utility is prone to a local information-disclosure vulnerability.
Local attackers can exploit this issue to obtain the 'key' from the list of running processes. This may lead to further attacks.
The 'ccrypt' utility in Bournal 1.4 is vulnerable; other versions may also be affected.
Bournal 'ccrypt' utility is prone to a local information-disclosure vulnerability.
Local attackers can exploit this issue to obtain the 'key' from the list of running processes. This may lead to further attacks.
The 'ccrypt' utility in Bournal 1.4 is vulnerable; other versions may also be affected.
Exploit / POC
Bournal ccrypt Utility Local Information Disclosure Vulnerability
Local attackers can use standard tools to exploit this issue.
Local attackers can use standard tools to exploit this issue.
Solution / Fix
Bournal ccrypt Utility Local Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references for details.
Solution:
Updates are available. Please see the references for details.
References
Bournal ccrypt Utility Local Information Disclosure Vulnerability
References:
References: