CVE Feed

    Dashboard / CVE / CVE-2016-7553

    CVE-2016-7553

    The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.

    Published:Sep 22, 2016
    Last Modified:Apr 20, 2025
    EPS:Feb 27, 2017
    EPSS Score:0.00084
    CVSS Score:3.3

    Affected Products

    Vendor
    Irssi
    Product
    Buf.pl

    Exploits

    No exploit reference

    References

    http://www.openwall.com/lists/oss-security/2016/09/24/1
    http://www.openwall.com/lists/oss-security/2016/09/26/4
    http://www.securityfocus.com/bid/93155
    https://github.com/irssi/scripts.irssi.org/commit/f1b1eb154baa684fad5d65bf4dff79c8ded8b65a
    https://irssi.org/security/buf_pl_sa_2016.txt
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7OM3WHWQ7RIAOZSOZZUM4CUYGKSIAGJJ/
    http://www.openwall.com/lists/oss-security/2016/09/24/1
    http://www.openwall.com/lists/oss-security/2016/09/26/4
    http://www.securityfocus.com/bid/93155
    https://github.com/irssi/scripts.irssi.org/commit/f1b1eb154baa684fad5d65bf4dff79c8ded8b65a
    https://irssi.org/security/buf_pl_sa_2016.txt
    https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7OM3WHWQ7RIAOZSOZZUM4CUYGKSIAGJJ/

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High