Ubuntu.comUB:CVE-2016-7553CVE-2016-7553
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
3.3 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
0.0004 Low
EPSS
Percentile
5.1%
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions
for the scrollbuffer dump file created between upgrades, which might allow
local users to obtain sensitive information from private chat conversations
by reading the file.
Bugs
References
www.openwall.com/lists/oss-security/2016/09/24/1
irssi.org/2016/09/22/buf.pl-update/
irssi.org/security/buf_pl_sa_2016.txt
launchpad.net/bugs/cve/CVE-2016-7553
nvd.nist.gov/vuln/detail/CVE-2016-7553
security-tracker.debian.org/tracker/CVE-2016-7553
ubuntu.com/security/notices/USN-3184-1
www.cve.org/CVERecord?id=CVE-2016-7553
Related
2.1 Low
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:L/AC:L/Au:N/C:P/I:N/A:N
3.3 Low
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
0.0004 Low
EPSS
Percentile
5.1%