https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2004-1052.htmlhttps://patchthecve.com/cve/CVE-2004-1052.htmlTue, 16 Jun 2026 22:06:54 +0000HIGH 10.0: Buffer overflow in the getnickuserhost function in BNC 2.8.9, and possibly other versions, allows remote IRC servers to execute arbitrary code via an IRC server response that contains many (1) ! (exclamation) or (2) @ (at sign) characters.https://patchthecve.com/cve/CVE-2004-2612.htmlhttps://patchthecve.com/cve/CVE-2004-2612.htmlTue, 16 Jun 2026 22:09:58 +0000HIGH 7.5: BNC 2.9.0 only grants access when an incorrect password is provided, which allows remote attackers to use the functionality intended for authorized users.https://patchthecve.com/cve/CVE-2004-1482.htmlhttps://patchthecve.com/cve/CVE-2004-1482.htmlTue, 16 Jun 2026 22:07:47 +0000HIGH 7.5: The sbuf_getmsg function in BNC incorrectly handles backspace characters, which could allow remote attackers to bypass authentication and gain access to arbitrary scripts.