A denial of service flaw was found in the way Bip IRC Bouncer exchanged user credentials by initiating the IRC protocol session. A remote, unauthenticated user could send a specially crafted connection request, leading to bip daemon crash (NULL pointer dereference)

References: [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=595409

Buffer overflow in Bip 0.8.8 and earlier might allow remote authenticated users to execute arbitrary code via vectors involving a series of TCP connections that triggers use of many open file descriptors.