CVE-2004-1052

Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (at sign) characters.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://marc.info/?l=bugtraq&m=110011817627839&w=2
http://secunia.com/advisories/13149/
http://security.lss.hr/en/index.php?page=details&ID=LSS-2004-11-03
http://www.debian.org/security/2004/dsa-595
http://www.securityfocus.com/bid/11647	Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/18013

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:bnc:bnc:2.2.4:::::::*
	cpe:2.3:a:bnc:bnc:2.4.6:::::::*
	cpe:2.3:a:bnc:bnc:2.4.8:::::::*
	cpe:2.3:a:bnc:bnc:2.6:::::::*
	cpe:2.3:a:bnc:bnc:2.6.2:::::::*
	cpe:2.3:a:bnc:bnc:2.6.4:::::::*
	cpe:2.3:a:bnc:bnc:2.8.8:::::::*
	cpe:2.3:a:bnc:bnc:2.8.9:::::::*

Configuration 2 (hide)

OR	cpe:2.3:o:debian:debian_linux:3.0::alpha:::::
	cpe:2.3:o:debian:debian_linux:3.0::arm:::::
	cpe:2.3:o:debian:debian_linux:3.0::hppa:::::
	cpe:2.3:o:debian:debian_linux:3.0::ia-32:::::
	cpe:2.3:o:debian:debian_linux:3.0::ia-64:::::
	cpe:2.3:o:debian:debian_linux:3.0::m68k:::::
	cpe:2.3:o:debian:debian_linux:3.0::mips:::::
	cpe:2.3:o:debian:debian_linux:3.0::mipsel:::::
	cpe:2.3:o:debian:debian_linux:3.0::ppc:::::
	cpe:2.3:o:debian:debian_linux:3.0::s-390:::::
	cpe:2.3:o:debian:debian_linux:3.0::sparc:::::
	cpe:2.3:o:gentoo:linux::::::::

History

No history.

Information

Published : 2005-03-01 05:00

Updated : 2017-07-11 01:30

NVD link : CVE-2004-1052

Mitre link : CVE-2004-1052

CVE.ORG link : CVE-2004-1052

JSON object : View

Products Affected

debian

debian_linux

bnc

bnc

gentoo

linux

CWE

NVD-CWE-Other

{"id": "CVE-2004-1052", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": true, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2005-03-01T05:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=110011817627839&w=2", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/13149/", "source": "cve@mitre.org"}, {"url": "http://security.lss.hr/en/index.php?page=details&ID=LSS-2004-11-03", "source": "cve@mitre.org"}, {"url": "http://www.debian.org/security/2004/dsa-595", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/11647", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/18013", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (at sign) characters."}], "lastModified": "2017-07-11T01:30:41.370", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:bnc:bnc:2.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E6B6FD0A-1812-4E42-A7C1-C0ABA923B71D"}, {"criteria": "cpe:2.3:a:bnc:bnc:2.4.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "75F5F595-CB3D-4B7A-9A73-5D32E0670864"}, {"criteria": "cpe:2.3:a:bnc:bnc:2.4.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "336D2561-13B5-4E0C-9159-30AFD9D3D22B"}, {"criteria": "cpe:2.3:a:bnc:bnc:2.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C6B4983A-9ADA-414F-B965-F0E44D731AF7"}, {"criteria": "cpe:2.3:a:bnc:bnc:2.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "87258990-17F6-4515-8EC8-05C9D9BEC75C"}, {"criteria": "cpe:2.3:a:bnc:bnc:2.6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "132FD83C-3392-46D8-AD42-A34619140FF4"}, {"criteria": "cpe:2.3:a:bnc:bnc:2.8.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB3C3052-8585-4E21-B982-733637A7147F"}, {"criteria": "cpe:2.3:a:bnc:bnc:2.8.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F088954A-3B51-497C-B693-D6AD1C190692"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:alpha:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6B060E4-B5A6-4469-828E-211C52542547"}, {"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:arm:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "974C3541-990C-4CD4-A05A-38FA74A84632"}, {"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:hppa:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6CBF1E0F-C7F3-4F83-9E60-6E63FA7D2775"}, {"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:ia-32:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58792F77-B06F-4780-BA25-FE1EE6C3FDD9"}, {"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:ia-64:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C9419322-572F-4BB6-8416-C5E96541CF33"}, {"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:m68k:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BFC50555-C084-46A3-9C9F-949C5E3BB448"}, {"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:mips:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C25D6E1-D283-4CEA-B47B-60C47A5C0797"}, {"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:mipsel:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD18A446-C634-417E-86AC-B19B6DDDC856"}, {"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:ppc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4BB852E-61B2-4842-989F-C6C0C901A8D7"}, {"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:s-390:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24DD9D59-E2A2-4116-A887-39E8CC2004FC"}, {"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:sparc:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F28D7457-607E-4E0C-909A-413F91CFCD82"}, {"criteria": "cpe:2.3:o:gentoo:linux:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "647BA336-5538-4972-9271-383A0EC9378E"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}