Secunia Research has discovered a security issue in Bournal, which can be exploited by malicious, local users to perform certain actions with escalated privileges.

The script uses temporary files in an insecure manner, which can be exploited to e.g. overwrite arbitrary files via symlink attacks when running the update check via the "--hack_the_gibson" parameter.

Solution
Update to version 1.4.1, which removes the vulnerable functionality.

Provided and/or discovered by
Secunia Research

Original Advisory
http://secunia.com/secunia_research/2010-6/

Deep Links
Links available to Secunia VIM customers