CVE:CVE-2010-0118
CNNVD:CNNVD-201002-262
Bournal是一款允许使用个人密码保护杂志，日志或者日记的脚本。
Bournal存在不安全临时文件创建漏洞。本地用户可以借助和一个具有--hack_the_gibson检查功能的未明临时文件的symlink攻击，覆盖任意文件。
solution:Upgrade becauseinter bournal to a higher version than 1.4,0.1,0.2,0.3,0.4,0.4.5,0.6,0.7,0.8,0.9,1.0,1.1,1.2,1.3,and avoid the version (,1.4],0.1,0.2,0.3,0.4,0.4.5,0.6,0.7,0.8,0.9,1.0,1.1,1.2,1.3