CVE-2005-2806: Trevor Hogan Bnbt

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

client.cpp in BNBT EasyTracker 7.7r3.2004.10.27 and earlier allows remote attackers to cause a denial of service (application hang) via an HTTP header containing only a ":" (colon), possibly leading to an integer signedness error due to a missing field name or value.

Affected products

  • Trevor Hogan Bnbt: version 7.5_beta_release2 only; version 7.5_beta_release3 only; version 7.7_2004-10-27_r3 only

Published 2005-09-06. Last modified 2026-06-16.