Bournal Privilege Escalation Vulnerability

  1. Network Vulnerabilities
  2. Privilege escalation
  3. Bournal Privilege Escalation Vulnerability
Summary
This host is installed with Bournal and is prone to privilege escalation vulnerability
Impact
Successful exploitation will allow attackers to perform certain actions with escalated privileges. Impact Level: Application.
Solution
Upgarde to Bournal 1.4.1 For updates refer to http://becauseinter.net/bournal/
Insight
The flaw exists while using temporary files in an insecure manner, which may allow attackers to overwrite arbitrary files via symlink attacks when running the update check via the '--hack_the_gibson' parameter.
Affected
Bournal version prior to 1.4.1
References
Updated on 2015-03-25
Severity
Low Severity
Classification
Related Vulnerabilities