← Back

CVE-2004-1052

nvd nist
Published: Mar 1, 2005Modified: Apr 16, 2026

JSON object

Loading...
10.0
Vector
AV:N/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 10.0 / Impact: 10.0
Source: NVD

Description

Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (at sign) characters.

Affected (20)

Products: Bnc: Bnc · Debian: Debian Linux · Gentoo: Linux
1 product
Bnc
1 product
Debian Linux
1 product
Linux
Configuration A
8 vulnerable
Vulnerable SoftwareAffected Versions
Bnc
Version 2.2.4
Version 2.4.6
Version 2.4.8
Version 2.6.2
Version 2.6.4
Version 2.6
Version 2.8.8
Version 2.8.9
Configuration B
12 vulnerable
Vulnerable SoftwareAffected Versions
Debian
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
Version 3.0
All versions

References (12)

Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.