Lucene search
HistoryMar 01, 2005 - 5:00 a.m.
CVE-2004-1052
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.8
Confidence
Low
EPSS
0.009
Percentile
83.1%
Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (at sign) characters.
Affected configurations
Node
bncbncMatch2.2.4
ORbncbncMatch2.4.6
ORbncbncMatch2.4.8
ORbncbncMatch2.6
ORbncbncMatch2.6.2
ORbncbncMatch2.6.4
ORbncbncMatch2.8.8
ORbncbncMatch2.8.9
Node
debiandebian_linuxMatch3.0alpha
ORdebiandebian_linuxMatch3.0arm
ORdebiandebian_linuxMatch3.0hppa
ORdebiandebian_linuxMatch3.0ia-32
ORdebiandebian_linuxMatch3.0ia-64
ORdebiandebian_linuxMatch3.0m68k
ORdebiandebian_linuxMatch3.0mips
ORdebiandebian_linuxMatch3.0mipsel
ORdebiandebian_linuxMatch3.0ppc
ORdebiandebian_linuxMatch3.0s-390
ORdebiandebian_linuxMatch3.0sparc
ORgentoolinux
| Vendor | Product | Version | CPE |
|---|---|---|---|
| bnc | bnc | 2.2.4 | cpe:2.3:a:bnc:bnc:2.2.4:*:*:*:*:*:*:* |
| bnc | bnc | 2.4.6 | cpe:2.3:a:bnc:bnc:2.4.6:*:*:*:*:*:*:* |
| bnc | bnc | 2.4.8 | cpe:2.3:a:bnc:bnc:2.4.8:*:*:*:*:*:*:* |
| bnc | bnc | 2.6 | cpe:2.3:a:bnc:bnc:2.6:*:*:*:*:*:*:* |
| bnc | bnc | 2.6.2 | cpe:2.3:a:bnc:bnc:2.6.2:*:*:*:*:*:*:* |
| bnc | bnc | 2.6.4 | cpe:2.3:a:bnc:bnc:2.6.4:*:*:*:*:*:*:* |
| bnc | bnc | 2.8.8 | cpe:2.3:a:bnc:bnc:2.8.8:*:*:*:*:*:*:* |
| bnc | bnc | 2.8.9 | cpe:2.3:a:bnc:bnc:2.8.9:*:*:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:* |
| debian | debian_linux | 3.0 | cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:* |
Related
openvas
openvas
FreeBSD Ports: bnc
2008-09-04 00:00:00
Debian Security Advisory DSA 595-1 (bnc)
2008-01-17 00:00:00
FreeBSD Ports: bnc
2008-09-04 00:00:00
nessus
nessus
FreeBSD : bnc -- remotely exploitable buffer overflow in getnickuserhost (9be819c6-4633-11d9-a9e7-0001020eed82)
2005-07-13 00:00:00
Debian DSA-595-1 : bnc - buffer overflow
2004-11-24 00:00:00
debian
debian
[SECURITY] [DSA 595-1] New bnc packages arbitrary code execution
2004-11-24 07:52:45
[SECURITY] [DSA 595-1] New bnc packages arbitrary code execution
2004-11-24 07:52:45
osv
osv
bnc - buffer overflow
2004-11-24 00:00:00
freebsd
freebsd
bnc -- remotely exploitable buffer overflow in getnickuserhost
2004-11-10 00:00:00
cvelist
cvelist
CVE-2004-1052
2004-11-18 05:00:00
cve
cve
CVE-2004-1052
2005-03-01 05:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.8
Confidence
Low
EPSS
0.009
Percentile
83.1%
Related for NVD:CVE-2004-1052