CVE-2004-1052

Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (at sign) characters.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2005-03-01

Last modified

2024-08-08

Affected products

• Bnc (Bnc)
• Debian Linux (Debian)
• Linux (Gentoo)

References

• http://marc.info/?l=bugtraq&m=110011817627839&w=2
• http://secunia.com/advisories/13149/
• http://security.lss.hr/en/index.php?page=details&ID=LSS-2004-11-03
• http://www.debian.org/security/2004/dsa-595
• http://www.securityfocus.com/bid/11647
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18013