Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (at sign) characters.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Bnc | Bnc | 2.2.4 (including) | 2.2.4 (including) |
| Bnc | Bnc | 2.4.6 (including) | 2.4.6 (including) |
| Bnc | Bnc | 2.4.8 (including) | 2.4.8 (including) |
| Bnc | Bnc | 2.6 (including) | 2.6 (including) |
| Bnc | Bnc | 2.6.2 (including) | 2.6.2 (including) |
| Bnc | Bnc | 2.6.4 (including) | 2.6.4 (including) |
| Bnc | Bnc | 2.8.8 (including) | 2.8.8 (including) |
| Bnc | Bnc | 2.8.9 (including) | 2.8.9 (including) |
References
- http://marc.info/?l=bugtraq\u0026m=110011817627839\u0026w=2
- http://secunia.com/advisories/13149/
- http://security.lss.hr/en/index.php?page=details\u0026ID=LSS-2004-11-03
- http://www.debian.org/security/2004/dsa-595
- http://www.securityfocus.com/bid/11647
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18013
- http://marc.info/?l=bugtraq\u0026m=110011817627839\u0026w=2
- http://secunia.com/advisories/13149/
- http://security.lss.hr/en/index.php?page=details\u0026ID=LSS-2004-11-03
- http://www.debian.org/security/2004/dsa-595
- http://www.securityfocus.com/bid/11647
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18013