CVE-2016-7553: Low severity Irssi buf.pl vulnerability
Published Feb 27, 2017
·Updated
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.
Affected Software
1 affected component
Irssi buf.pl<=2.13
Remediation
Patch Available
Patch Available
Patch Available
Event History
Feb 27, 2017
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Data Sourced
via NVD·10:59 PM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-7553?
CVE-2016-7553 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2016-7553?
To fix CVE-2016-7553, upgrade Irssi to version 0.8.20 or later.
3
What kind of information is exposed by CVE-2016-7553?
CVE-2016-7553 potentially exposes sensitive information from private chat conversations.
4
Which versions of Irssi are affected by CVE-2016-7553?
Irssi versions before 0.8.20 and buf.pl versions prior to 2.20 are affected by CVE-2016-7553.
5
Can local users exploit CVE-2016-7553?
Yes, local users may exploit CVE-2016-7553 to read unsecured scrollbuffer dump files.