critical10.0
CVE-2004-1052
Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC serve…
Impact
Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (at sign) characters.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bnc | Bnc | Versions 2.2.4, 2.4.6, 2.4.8, 2.6, 2.6.2, 2.6.4 |
| Debian | Debian Linux | Version 3.0 |
| Gentoo | Linux | All versions |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=110011817627839&w=2
- http://secunia.com/advisories/13149/
- http://security.lss.hr/en/index.php?page=details&ID=LSS-2004-11-03
- http://www.debian.org/security/2004/dsa-595
- http://www.securityfocus.com/bid/11647
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18013
- http://marc.info/?l=bugtraq&m=110011817627839&w=2
- http://secunia.com/advisories/13149/
- http://security.lss.hr/en/index.php?page=details&ID=LSS-2004-11-03
- http://www.debian.org/security/2004/dsa-595
- http://www.securityfocus.com/bid/11647
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18013