Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

BNC: Buffer overflow vulnerability

Package(s):

bnc

CVE #(s):

Created:

November 16, 2004

Updated:

December 1, 2004

Description:

Leon Juranic discovered that BNC fails to do proper bounds checking when checking server response. An attacker could exploit this to cause a Denial of Service and potentially execute arbitrary code with the permissions of the user running BNC.

Alerts:

Debian	DSA-595-1	2004-11-24
Gentoo	200411-24	2004-11-16

(Log in to post comments)