Vulnerabilities

TI-2004-02482 CVE-2004-2612 · GHSA-86jg-c9mr-jw7m

BNC 2.9.0 only grants access when an incorrect password is provided, which allows remote…

LOW 36

BNC 2.9.0 only grants access when an incorrect password is provided, which allows remote attackers to use the functionality intended for authorized users.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01549 Published 2005-12-04 No fix listed

TI-2004-01358 CVE-2004-1482 · GHSA-8m55-37pr-2mgx

The sbuf_getmsg function in BNC incorrectly handles backspace characters, which could…

LOW 37

The sbuf_getmsg function in BNC incorrectly handles backspace characters, which could allow remote attackers to bypass authentication and gain access to arbitrary scripts.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01895 Published 2005-02-13 No fix listed

TI-2004-00949 CVE-2004-1052 · GHSA-6gv9-vjjv-fg5m

Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other…

MEDIUM 49

Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (a…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03577 Published 2004-11-18 No fix listed

Vulnerabilities

Filters

BNC 2.9.0 only grants access when an incorrect password is provided, which allows remote…

The sbuf_getmsg function in BNC incorrectly handles backspace characters, which could…

Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other…