BNC: Buffer overflow vulnerability

Background BNC BouNCe is an IRC proxy server. Description Leon Juranic discovered that BNC fails to do proper bounds checking when checking server response. Impact An attacker could exploit this to cause a Denial of Service and potentially execute arbitary code with the permissions of the user...

BNC IRC Server Incorrect Password Authentication Bypass

The remote host is running a version of the BNC IRC proxy that contains a flaw in its authentication process that accepted only logins with incorrect passwords. An attacker may use this issue to gain access to the remote IRC proxy server. C Tenable Network Security, Inc. include"compat.inc";...

BNC IRC Server < 2.9.1 Authentication Bypass

Binary data 2404.prm...

BNC buffer overflow

Buffer overflow on server response parsing...

BNC 2.8.9 remote buffer overflow

LSS Security Advisory LSS-2004-11-3 http://security.lss.hr --- Title : BNC 2.8.9 remote buffer overflow Advisory ID : LSS-2004-11-3 Date : November 10th, 2004 Advisory URL: : http://security.lss.hr/en/index.php?page=details&ID=LSS-2004-11-03 Impact : Remote code execution or DoS attack Risk level...

BNC < 2.9.1 getnickuserhost IRC Server Response Buffer Overflow

Binary data 2403.prm...

bnc -- remotely exploitable buffer overflow in getnickuserhost

A LSS Security Advisory reports: There is a buffer overflow vulnerability in getnickuserhost function that is called when BNC is processing response from IRC server. Vulnerability can be exploited if attacker tricks user to connect to his fake IRC server that will exploit this vulnerability. If t...

BNC protection bypass

By using backspace it's possible to bypass command protection...

GLSA-200410-13 : BNC: Input validation flaw

The remote host is affected by the vulnerability described in GLSA-200410-13 BNC: Input validation flaw A flaw exists in the input parsing of BNC where part of the sbufgetmsg function handles the backspace character incorrectly. Impact : A remote user could issue commands using fake authenticatio...

[Full-Disclosure] [ GLSA 200410-13 ] BNC: Input validation flaw

Gentoo Linux Security Advisory GLSA 200410-13 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Severity:...

bncDoS.txt

vulnerabilities ------------------------------------------------------------------------ 2003-05-26 BNC = 2.6.2 DoS Rosiello Security & DTORS Security ADVISORY http://www.rosiello.org Denial of Service in bnc 2.6.2 February, 2003 I. BACKGROUND BNC which is a acro for BouNCe is a daemon designed t...

CVE-1999-0968

Buffer overflow in BNC IRC proxy allows remote attackers to gain privileges...

CVE-1999-0968

CVE-1999-0968 describes a buffer overflow in the BNC IRC proxy that allows remote attackers to gain privileges. The affected component is the BNC IRC proxy; the underlying cause is a buffer overflow vulnerability. The initial sources do not provide version-specific details, exploit vectors, explo...

CVE-1999-0968

Buffer overflow in BNC IRC proxy allows remote attackers to gain privileges...

BNC 2.2.42.4.62.4.8 - IRC Proxy Buffer Overflow (1)

BNC 2.2.42.4.62.4.8 - IRC Proxy Buffer Overflow 1 / source: https://www.securityfocus.com/bid/1927/info BNC's IRC Proxy is used as a gateway to an IRC server. A buffer stores a username which arguments the program's USER command. User-supplied input to this buffer is improperly checked for length...

BNC 2.2.4/2.4.6/2.4.8 - IRC Proxy Buffer Overflow (1)

/ source: https://www.securityfocus.com/bid/1927/info BNC's IRC Proxy is used as a gateway to an IRC server. A buffer stores a username which arguments the program's USER command. User-supplied input to this buffer is improperly checked for length. As a result, the excessive data copied onto the...

BNC 2.2.42.4.62.4.8 - IRC Proxy Buffer Overflow (2)

BNC 2.2.42.4.62.4.8 - IRC Proxy Buffer Overflow 2 / source: https://www.securityfocus.com/bid/1927/info BNC's IRC Proxy is used as a gateway to an IRC server. A buffer stores a username which arguments the program's USER command. User-supplied input to this buffer is improperly checked for length...

BNC 2.2.4/2.4.6/2.4.8 - IRC Proxy Buffer Overflow (2)

/ source: https://www.securityfocus.com/bid/1927/info BNC's IRC Proxy is used as a gateway to an IRC server. A buffer stores a username which arguments the program's USER command. User-supplied input to this buffer is improperly checked for length. As a result, the excessive data copied onto the...