This script is Copyright (C) 2005-2013 Tenable Network Security, Inc.
The remote FreeBSD host is missing a security-related update.
A LSS Security Advisory reports :
There is a buffer overflow vulnerability in getnickuserhost() function
that is called when BNC is processing response from IRC server.
Vulnerability can be exploited if attacker tricks user to connect to
his fake IRC server that will exploit this vulnerability. If the
attacker has access to BNC proxy server, this vulnerability can be
used to gain shell access on machine where BNC proxy server is set.
See also :
Update the affected package.
Risk factor :
Critical / CVSS Base Score : 10.0