Gentoo Linux Security Advisory GLSA 200410-13
https://security.gentoo.org/
Severity: Normal
Title: BNC: Input validation flaw
Date: October 15, 2004
Bugs: #66912
ID: 200410-13
Synopsis
=======
BNC contains an input validation flaw which might allow a remote
attacker to issue arbitrary IRC related commands.
Background
=========
BNC is an IRC proxying server
Affected packages
================
-------------------------------------------------------------------
Package / Vulnerable / Unaffected
-------------------------------------------------------------------
1 net-irc/bnc < 2.8.9 >= 2.8.9
==========
A flaw exists in the input parsing of BNC where part of the
sbuf_getmsg() function handles the backspace character incorrectly.
Impact
=====
A remote user could issue commands using fake authentication
c...
style>.gentoo_availability{display:block;}
Warning: Undefined array key "advisory_info" in /var/www/www.linuxsecurity.com-443/html/tmp/regularlabs/custom_php/3434016_4c9dbbdde36eef04251a4ced7eac4df9 on line 11
Get the latest Linux and open source security news straight to your inbox.