Description
The sbuf_getmsg function in BNC incorrectly handles backspace characters, which could allow remote attackers to bypass authentication and gain access to arbitrary scripts.
References
- 11355 vdb-entry
- 12770 third-party-advisory
- GLSA-200410-13 vendor-advisory
- bnc-backspace-command-execution(17672) vdb-entry
- 10596 vdb-entry
- http://www.gotbnc.com/changes.html#2.8.9