CVE-2016-7553

The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow local users to obtain sensitive information from private chat conversations by reading the file.

• CWE-275

• http://www.openwall.com/lists/oss-security/2016/09/24/1Mailing List, Patch
• http://www.openwall.com/lists/oss-security/2016/09/26/4Mailing List, Patch
• http://www.securityfocus.com/bid/93155Third Party Advisory, VDB Entry
• https://github.com/irssi/scripts.irssi.org/commit/f1b1eb154baa684fad5d65bf4dff79c8ded8b65aPatch
• https://irssi.org/security/buf_pl_sa_2016.txtPatch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7OM3WHWQ7RIAOZSOZZUM4CUYGKSIAGJJ/
• http://www.openwall.com/lists/oss-security/2016/09/24/1Mailing List, Patch
• http://www.openwall.com/lists/oss-security/2016/09/26/4Mailing List, Patch
• http://www.securityfocus.com/bid/93155Third Party Advisory, VDB Entry
• https://github.com/irssi/scripts.irssi.org/commit/f1b1eb154baa684fad5d65bf4dff79c8ded8b65aPatch
• https://irssi.org/security/buf_pl_sa_2016.txtPatch, Vendor Advisory
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/7OM3WHWQ7RIAOZSOZZUM4CUYGKSIAGJJ/

Published

Feb 27, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-7545SELinux policycoreutils allows local users to execute arbitr…
• CVE-2016-7547A command execution flaw on the Trend Micro Threat Discovery…
• CVE-2016-7549Google Chrome before 53.0.2785.113 does not ensure that the …
• CVE-2016-7550asterisk 13.10.0 is affected by: denial of service issues in…
• CVE-2016-7551chain_sip in Asterisk Open Source 11.x before 11.23.1 and 13…
• CVE-2016-7552On the Trend Micro Threat Discovery Appliance 2.6.1062r1, di…
• CVE-2016-7554Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2016-7555The avi_read_header function in libavformat/avidec.c in FFmp…
• CVE-2016-7560The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier,…
• CVE-2016-7561Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8…
• CVE-2016-7562The ff_draw_pc_font function in libavcodec/cga_data.c in FFm…
• CVE-2016-7563The chartorune function in Artifex Software MuJS allows atta…