CVE-2004-1052: Buffer Overflow
Published Nov 18, 2004
·Updated
Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (at sign) characters.
Affected Software
20 affected components
BNC BNC=2.4.8
BNC BNC=2.6
BNC BNC=2.8.8
BNC BNC=2.6.4
BNC BNC=2.2.4
BNC BNC=2.8.9
BNC BNC=2.6.2
BNC BNC=2.4.6
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Debian Debian Linux=3.0
Gentoo Linux
Debian Debian Linux=3.0
Remediation
Patch Available
Event History
Nov 18, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1052?
CVE-2004-1052 is classified as a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2004-1052?
To fix CVE-2004-1052, upgrade to a patched version of BNC, specifically version 2.8.10 or later.
3
Which versions are affected by CVE-2004-1052?
CVE-2004-1052 affects BNC versions 2.8.9 and earlier, along with other potentially vulnerable versions.
4
Can CVE-2004-1052 be exploited remotely?
Yes, CVE-2004-1052 can be exploited remotely via crafted IRC server responses.
5
Who is impacted by CVE-2004-1052?
Users running affected versions of BNC, particularly those in IRC environments, are at risk from CVE-2004-1052.