FreeBSD : nas -- multiple vulnerabilities (bf7912f5-c1a8-11e3-a5ac-001b21614864)

Hamid Zamani reports : multiple security problems buffer overflows, format string vulnerabilities and missing input sanitising, which could lead to the execution of arbitrary code. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[SECURITY] [DSA 2771-1] nas security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2771-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 09, 2013 http://www.debian.org/security/faq -...

MGASA-2013-0298 Updated nas packages fix security vulnerabilities

Updated nas packages fix security vulnerabilities: Buffer overflow when parsing display number and various other buffer overflows CVE-2013-4256. Heap overflow when using AUDIOHOST environment variable CVE-2013-4257. Race when opening a TCP device nas289...

[SECURITY] [DSA 2771-1] nas security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2771-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 09, 2013 http://www.debian.org/security/faq -...

DEBIAN-CVE-2013-4256

Multiple stack-based and heap-based buffer overflows in Network Audio System NAS 1.9.3 allow local users to cause a denial of service crash or possibly execute arbitrary code via the 1 display command argument to the ProcessCommandLine function in server/os/utils.c; 2 ResetHosts function in...

Sql injection

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-4256. Reason: This issue was MERGED into CVE-2013-4256 because it is the same type of vulnerability. Notes: All CVE users should reference CVE-2013-4256 instead of this candidate. All references and descriptions in this...

CVE-2013-4256

CVE-2013-4256 describes multiple stack-based and heap-based buffer overflows in Network Audio System (NAS) 1.9.3 that could allow a local attacker to crash the process or potentially execute arbitrary code via several NAS server modules (e.g., ProcessCommandLine, ResetHosts, various open/unix soc...

Debian: Security Advisory (DSA-2771-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu Update for nas USN-1986-1

Check for the Version of nas OpenVAS Vulnerability Test $Id: gbubuntuUSN19861.nasl 8494 2018-01-23 06:57:55Z teissa $ Ubuntu Update for nas USN-1986-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you c...

Fedora Update for nas FEDORA-2013-17036

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for nas FEDORA-2013-16989

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[USN-1986-1] Network Audio System (NAS) vulnerabilities

========================================================================== Ubuntu Security Notice USN-1986-1 October 01, 2013 nas vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu 12.04 LTS / 12.10 / 13.04 : nas vulnerabilities (USN-1986-1)

Hamid Zamani discovered multiple security issues in the Network Audio System NAS server. An attacker could possibly use these issues to cause a denial of service or execute arbitrary code. CVE-2013-4256, CVE-2013-4257. Note that Tenable Network Security has extracted the preceding description blo...

USN-1986-1: Network Audio System (NAS) vulnerabilities

Hamid Zamani discovered multiple security issues in the Network Audio System NAS server. An attacker could possibly use these issues to cause a denial of service or execute arbitrary code. CVE-2013-4256, CVE-2013-4257...

Fedora 20 : nas-1.9.3-9.fc20 (2013-16936)

This release fixes four security bugs: buffer overflow when parsing display number CVE-2013-4256, heap overflow when processing AUDIOHOST variable CVE-2013-4257, formatting string for syslog call CVE-2013-4258, and a race when opening a TCP device. Note that Tenable Network Security has extracted...

Fedora 19 : nas-1.9.3-7.fc19 (2013-17036)

This release fixes four security bugs: buffer overflow when parsing display number CVE-2013-4256, heap overflow when processing AUDIOHOST variable CVE-2013-4257, formatting string for syslog call CVE-2013-4258, and a race when opening a TCP device. Note that Tenable Network Security has extracted...

CVE-2013-4257

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2013-4256. Reason: This issue was MERGED into CVE-2013-4256 because it is the same type of vulnerability. Notes: All CVE users should reference CVE-2013-4256 instead of this candidate. All references and descriptions in this...

CVE-2012-4256

The CVE-2012-4256 entry concerns the jNews (com_jnews) Joomla! component version 7.5.1. The vulnerability is an information disclosure where remote attackers can obtain sensitive data by abusing the emailsearch parameter, which causes an error message that reveals the installation path. The Conne...

ZDI-11-337 : RealNetworks RealPlayer RV30 Uninitialized Index Value Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-11-337 : RealNetworks RealPlayer RV30 Uninitialized Index Value Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-337 November 28, 2011 - -- CVE ID: CVE-2011-4256 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - --...

RealNetworks RealPlayer Multiple Vulnerabilities Nov - 11 (Mac OS X)

This host is installed with RealPlayer which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodrealplayermultvulnnov11macosx.nasl 7024 2017-08-30 11:51:43Z teissa $ RealNetworks RealPlayer Multiple Vulnerabilities Nov - 11 Mac OS X Authors: Madhuri D Copyright: Copyright...