CVE-2004-1052 Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (excl...
HighCVSS 10.0
EPSS 3.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (at sign) characters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bnc | = 2.2.4 | No fix listed |
| bnc | = 2.4.6 | No fix listed |
| bnc | = 2.4.8 | No fix listed |
| bnc | = 2.6 | No fix listed |
| bnc | = 2.6.2 | No fix listed |
| bnc | = 2.6.4 | No fix listed |
| bnc | = 2.8.8 | No fix listed |
| bnc | = 2.8.9 | No fix listed |
| debian linux | = 3.0 | No fix listed |
| gentoo linux | All versions | No fix listed |
References
- 20041110 BNC 2.8.9 remote buffer overflow mailing-list
- 13149 third-party-advisory
- security.lss.hr
- DSA-595 vendor-advisory
- 11647 patch vdb-entry vendor-advisory
- bnc-irc-getnickuserhost-bo(18013) vdb-entry