Lucene search

K
ubuntuUbuntuUSN-446-1
HistoryMar 28, 2007 - 12:00 a.m.

NAS vulnerabilities

2007-03-2800:00:00
ubuntu.com
41

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.18 Low

EPSS

Percentile

96.2%

Releases

  • Ubuntu 6.10
  • Ubuntu 6.06
  • Ubuntu 5.10

Details

Luigi Auriemma discovered multiple flaws in the Network Audio System
server. Remote attackers could send specially crafted network requests
that could lead to a denial of service or execution of arbitrary code.
Note that default Ubuntu installs do not include the NAS server.

OSVersionArchitecturePackageVersionFilename
Ubuntu6.10noarchnas< 1.8-2ubuntu0.1UNKNOWN
Ubuntu6.06noarchnas< 1.7-3ubuntu3.2UNKNOWN
Ubuntu5.10noarchnas< 1.7-2ubuntu2.1UNKNOWN

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

6.7 Medium

AI Score

Confidence

Low

0.18 Low

EPSS

Percentile

96.2%