BNC IRC Proxy Unspecified Backspace Issue

2004-10-09T12:34:21
ID OSVDB:10596
Type osvdb
Reporter Yak()
Modified 2004-10-09T12:34:21

Description

Vulnerability Description

BNC contains a flaw related to the handling of the backspace character that may allow an attacker to execute arbitrary BNC commands. No further details have been provided.

Solution Description

Upgrade to version 2.8.9 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Short Description

BNC contains a flaw related to the handling of the backspace character that may allow an attacker to execute arbitrary BNC commands. No further details have been provided.

References:

Vendor URL: http://www.gotbnc.com/ Vendor Specific Advisory URL Security Tracker: 1011583 Secunia Advisory ID:12770 Secunia Advisory ID:12845 CVE-2004-1482