Two weaknesses have been reported in Ibid, which can be exploited by malicious, local users and malicious users to disclose potentially sensitive information.

1) An error due to a "bot" creating a log file with insecure permissions when it first sends a message can be exploited to disclose the contents of private messages.

2) An error when a "bot" sends a private message in a public meeting can be exploited to read the message in the meeting minutes.

The weaknesses are reported in versions prior to 0.1.1.

Solution
Update to version 0.1.1.

Provided and/or discovered by
Reported by the vendor.

Original Advisory
http://ibid.omnia.za.net/docs/0.1.0/changes.html#release-0-1-1-pimpernel-2011-02-24

Deep Links
Links available to Secunia VIM customers