CVE-2004-1052

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-03-01 · updated 2026-06-16

Description

Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (at sign) characters.

Affected products

Bnc: 2.2.4, 2.4.6, 2.4.8, 2.6, 2.6.2, 2.6.4 (+2)
Debian Linux: 3.0
gentoo Linux: all versions

References

http://marc.info/?l=bugtraq&m=110011817627839&w=2
http://secunia.com/advisories/13149/
http://security.lss.hr/en/index.php?page=details&ID=LSS-2004-11-03
http://www.debian.org/security/2004/dsa-595
http://www.securityfocus.com/bid/11647
https://exchange.xforce.ibmcloud.com/vulnerabilities/18013
http://marc.info/?l=bugtraq&m=110011817627839&w=2
http://secunia.com/advisories/13149/
http://security.lss.hr/en/index.php?page=details&ID=LSS-2004-11-03
http://www.debian.org/security/2004/dsa-595
http://www.securityfocus.com/bid/11647
https://exchange.xforce.ibmcloud.com/vulnerabilities/18013

Get alerted when CVE-2004-1052 or the next vulnerability affects your stack