Описание
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | not-affected | 0.8.20-2ubuntu1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was released [0.8.15-5ubuntu3.1]] |
| esm-infra-legacy/xenial | released | 0.8.19-1ubuntu1.3 |
| esm-infra/xenial | released | 0.8.19-1ubuntu1.3 |
| precise | released | 0.8.15-4ubuntu3.1 |
| trusty | released | 0.8.15-5ubuntu3.1 |
| trusty/esm | DNE | trusty was released [0.8.15-5ubuntu3.1] |
| upstream | released | 0.8.20-2 |
| vivid/stable-phone-overlay | DNE | |
| vivid/ubuntu-core | DNE |
Показывать по
2.1 Low
CVSS2
3.3 Low
CVSS3
Связанные уязвимости
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permiss ...
The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.
2.1 Low
CVSS2
3.3 Low
CVSS3