CVE

Id
94373  
CVE No.
CVE-2016-7553  
Status
Candidate  
Description
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.  
Phase
Assigned (20160909)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
796320 94373 CVE-2016-7553 MLIST:[oss-security] 20160924 CVE Request: irssi: information disclosure vulnerabilit in buf.pl  View
796321 94373 CVE-2016-7553 URL:http://www.openwall.com/lists/oss-security/2016/09/24/1  View
796322 94373 CVE-2016-7553 MLIST:[oss-security] 20160926 Re: CVE Request: irssi: information disclosure vulnerabilit in buf.pl  View
796323 94373 CVE-2016-7553 URL:http://www.openwall.com/lists/oss-security/2016/09/26/4  View
796324 94373 CVE-2016-7553 CONFIRM:https://github.com/irssi/scripts.irssi.org/commit/f1b1eb154baa684fad5d65bf4dff79c8ded8b65a  View
796325 94373 CVE-2016-7553 CONFIRM:https://irssi.org/security/buf_pl_sa_2016.txt  View
796326 94373 CVE-2016-7553 FEDORA:FEDORA-2016-39de4eb5e7  View
796327 94373 CVE-2016-7553 URL:https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/7OM3WHWQ7RIAOZSOZZUM4CUYGKSIAGJJ/  View
796328 94373 CVE-2016-7553 BID:93155  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64520 JVNDB-2016-006295 Adobe Animate におけるサービス運用妨害 (DoS) の脆弱性 Adobe Animate には、サービス運用妨害 (メモリ破損) 状態にされ、その結果、任意のコードを実行される脆弱性が存在します。 CVE-2016-7866 94373 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-006295.html  View