Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Gentoo: GLSA-200410-14 Moderate: XYZ Library Buffer Overflow Vulnerability

gentoo
Calendar Grey October 15, 2004
Scroller Gentoo
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Adviso
BNC contains an input validation flaw which might allow a remote attacker to issue arbitrary IRC related commands.

Summary

Gentoo Linux Security Advisory GLSA 200410-13 https://security.gentoo.org/ Severity: Normal Title: BNC: Input validation flaw Date: October 15, 2004 Bugs: #66912 ID: 200410-13

Synopsis ======= BNC contains an input validation flaw which might allow a remote attacker to issue arbitrary IRC related commands.
Background ========= BNC is an IRC proxying server
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 net-irc/bnc < 2.8.9 >= 2.8.9
========== A flaw exists in the input parsing of BNC where part of the sbuf_getmsg() function handles the backspace character incorrectly.
Impact ===== A remote user could issue commands using fake authentication c...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory Gentoo remote command execution normal severity BNC input flaw IRC proxy

Resolution

References

Availability

style>.gentoo_availability{display:block;}

Concerns

Severity
important
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory Gentoo remote command execution normal severity BNC input flaw IRC proxy

Synopsis

Background

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Affected Packages

Impact

Workaround