13 matches found
Linux Distros Unpatched Vulnerability : CVE-2016-7553
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local user...
EulerOS 2.0 SP3 : irssi (EulerOS-SA-2021-1803)
According to the version of the irssi package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow...
EulerOS 2.0 SP2 : irssi (EulerOS-SA-2021-1306)
According to the version of the irssi package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow...
Huawei EulerOS: Security Advisory for irssi (EulerOS-SA-2021-1197)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP5 : irssi (EulerOS-SA-2021-1197)
According to the version of the irssi package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow...
CVE-2016-7553
CVE-2016-7553 affects Irssi prior to 0.8.20 via the buf.pl script (before version 2.20) that creates a scrollbuffer dump file with weak permissions. This could allow local users to read private chat conversations by accessing the dump file created during upgrades. The available connected document...
Debian DLA-722-1 : irssi security update
An information disclosure vulnerability was found in irssi. CVE-2016-7553 Other users on the same machine as the user running irssi with buf.pl loaded may be able to retrieve the whole window contents after /UPGRADE. Furthermore, this dump of the windows contents is never removed afterwards. For...
MGASA-2016-0384 Updated irssi packages fix security vulnerability
An information disclosure vulnerability was found in the buf.pl core script for irssi. Other users on the same machine may be able to retrieve the whole window contents after /UPGRADE when the buf.pl script is loaded. Furthermore, this dump of the windows contents is never removed afterwards...
Updated irssi packages fix security vulnerability
An information disclosure vulnerability was found in the buf.pl core script for irssi. Other users on the same machine may be able to retrieve the whole window contents after /UPGRADE when the buf.pl script is loaded. Furthermore, this dump of the windows contents is never removed afterwards...
openSUSE Security Update : irssi (openSUSE-2016-2524)
The IRC client irssi was updated to 0.8.20, fixing various bugs and security issues. - CVE-2016-7044: The unformat24bitcolor function in the format parsing code in Irssi, when compiled with true-color enabled, allowed remote attackers to cause a denial of service heap corruption and crash via an...
Fedora 23 : irssi (2016-0551065fe0)
Security fix for CVE-2016-7553. ---- This is new version of irssi fixing security bugs, for details see upstream announcement: https://github.com/irssi/irssi/releases/tag/0.8.20 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...
Fedora 24 : irssi (2016-a64716084e)
Security fix for CVE-2016-7553. ---- This is new version of irssi fixing security bugs, for details see upstream announcement: https://github.com/irssi/irssi/releases/tag/0.8.20 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system...
CVE-2016-7553
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file...