PT-2017-19418 · Irssi · Irssi-Otr
Publicado
2017-02-07
·
Atualizado
2017-02-07
Nenhuma
Não há classificações de severidade ou métricas disponíveis. Quando houver, atualizaremos as informações correspondentes na página.
Name of the Vulnerable Software and Affected Versions
irssi-otr (affected versions not specified)
Description
A flaw was discovered in the way irssi-otr handles data returned by libotr. After initiating an OTR session, only the first line is sent as a PRIVMSG, while additional data is sent as raw commands to the IRC server. This additional data is typically a human-readable HTML-formatted instruction message from libotr, which is a fixed string. Although this is considered a minor security concern, remediation is necessary to prevent further security issues.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Irssi-Otr