CVEvulnerability

CVE-2004-1052

10.0 HIGH Published 2005-03-01 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-03-01
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (at sign) characters.

Affected configurations

• bnc bnc 2.2.4 • bnc bnc 2.4.6 • bnc bnc 2.4.8 • bnc bnc 2.6 • bnc bnc 2.6.2 • bnc bnc 2.6.4 • bnc bnc 2.8.8 • bnc bnc 2.8.9 • debian debian linux 3.0 • gentoo linux

References