CVE-2004-1482

Published: Dec 31, 2004Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The sbuf_getmsg function in BNC incorrectly handles backspace characters, which could allow remote attackers to bypass authentication and gain access to arbitrary scripts.

Affected (6)

Products: Bnc: Bnc

Bnc

1 product

Bnc

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Bnc Bnc	Version 2.2.4
Bnc Bnc	Version 2.4.6
Bnc Bnc	Version 2.4.8
Bnc Bnc	Version 2.6.2
Bnc Bnc	Version 2.6
Bnc Bnc	Version 2.8.8

References (12)

http://secunia.com/advisories/12770/

Source: cve@mitre.org

Patch

http://www.gentoo.org/security/en/glsa/glsa-200410-13.xml

Source: cve@mitre.org

Patch

http://www.gotbnc.com/changes.html#2.8.9

Source: cve@mitre.org

http://www.osvdb.org/10596

Source: cve@mitre.org

http://www.securityfocus.com/bid/11355

Source: cve@mitre.org

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/17672

Source: cve@mitre.org

http://secunia.com/advisories/12770/