Lucene search
K

8 matches found

Prion
Prion
added 2017/02/27 10:59 p.m.17 views

Design/Logic Flaw

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...

2.1CVSS6.1AI score0.00084EPSS
Exploits0References6Affected Software1
NVD
NVD
added 2017/02/27 10:59 p.m.16 views

CVE-2016-7553

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...

3.3CVSS4.9AI score0.00084EPSS
Exploits0References6
CVE
CVE
added 2017/02/27 10:0 p.m.63 views

CVE-2016-7553

CVE-2016-7553 affects Irssi prior to 0.8.20 via the buf.pl script (before version 2.20) that creates a scrollbuffer dump file with weak permissions. This could allow local users to read private chat conversations by accessing the dump file created during upgrades. The available connected document...

3.3CVSS3.6AI score0.00084EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2017/02/27 10:0 p.m.20 views

CVE-2016-7553

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...

3.7AI score0.00084EPSS
Exploits0References6
OSV
OSV
added 2016/11/17 11:40 p.m.4 views

MGASA-2016-0384 Updated irssi packages fix security vulnerability

An information disclosure vulnerability was found in the buf.pl core script for irssi. Other users on the same machine may be able to retrieve the whole window contents after /UPGRADE when the buf.pl script is loaded. Furthermore, this dump of the windows contents is never removed afterwards...

3.3CVSS3.8AI score0.00084EPSS
Exploits0References3
Mageia
Mageia
added 2016/11/17 11:40 p.m.24 views

Updated irssi packages fix security vulnerability

An information disclosure vulnerability was found in the buf.pl core script for irssi. Other users on the same machine may be able to retrieve the whole window contents after /UPGRADE when the buf.pl script is loaded. Furthermore, this dump of the windows contents is never removed afterwards...

3.3CVSS2.9AI score0.00084EPSS
Exploits0References2
UbuntuCve
UbuntuCve
added 2016/09/27 12:0 a.m.19 views

CVE-2016-7553

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...

3.3CVSS6.3AI score0.00084EPSS
Exploits0References5
RedhatCVE
RedhatCVE
added 2016/09/26 9:17 a.m.23 views

CVE-2016-7553

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...

3.3CVSS0.9AI score0.00084EPSS
Exploits0References2
Rows per page
Query Builder