CVE-2004-1052

CVE-2004-1052 describes a critical buffer overflow vulnerability in the getnickuserhost function of BNC 2.8.9 and potentially other versions. This flaw allows remote IRC servers to execute arbitrary code on affected systems by sending a specially crafted IRC server response containing numerous '!' or '@' characters. With a CVSS score of 10.0, this vulnerability is highly severe, requiring no authentication or complex attack conditions, and leading to complete compromise of confidentiality, integrity, and availability. The affected products include various distributions of BNC on Linux. Despite its high severity, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage for this CVE are minimal, suggesting it has not garnered significant attention.