CVE-2008-0804: Improper Control of Generation of Code

PHP remote file inclusion vulnerability in usrgetform.html in Thecus N5200Pro NAS Server allows remote attackers to execute arbitrary PHP code via a URL in the name parameter...

Thecus N5200Pro NAS Server Control Panel - Remote File Inclusion

Thecus N5200Pro NAS Server Control Panel Remote File Ä°nclude Author : CrackersChild Mail : [email protected] Bug in : usrgetform.html Exploit : www.site.com:9443/usr/usrgetform.html?name=Shelz? Ä°nfo : http://www.thecus.com/productsover.php?cid=11&pid=8 Greetz: Str0ke milw0rm.com 2008-02-18...

Debian: Security Advisory (DSA-1273-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 5.10 / 6.06 LTS / 6.10 : nas vulnerabilities (USN-446-1)

Luigi Auriemma discovered multiple flaws in the Network Audio System server. Remote attackers could send specially crafted network requests that could lead to a denial of service or execution of arbitrary code. Note that default Ubuntu installs do not include the NAS server. Note that Tenable...

Promise NAS NS4300N GUI bug

List, There is a bug in the Promise NAS NS4300N web GUI firmware version 1.1.0.5 which allows an authenticated admin user to change the password of the 'root' account. The user management portion of the web interface allows the admin user to change user's passwords. The PHP script that handles th...

Promise NAS NS4300N superuser access protection bypass

It's possible to bypass resttrictions for direct remote root access...

promise-root.txt

List, There is a bug in the Promise NAS NS4300N web GUI firmware version 1.1.0.5 which allows an authenticated admin user to change the password of the 'root' account. The user management portion of the web interface allows the admin user to change user's passwords. The PHP script that handles th...

GLSA-200704-20 : NAS: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200704-20 NAS: Multiple vulnerabilities Luigi Auriemma has discovered multiple vulnerabilities in NAS, some of which include a buffer overflow in the function acceptattlocal, an integer overflow in the function ProcAuWriteElement,...

NAS: Multiple vulnerabilities

Background NAS is a network transparent, client/server audio transport system. Description Luigi Auriemma has discovered multiple vulnerabilities in NAS, some of which include a buffer overflow in the function acceptattlocal, an integer overflow in the function ProcAuWriteElement, and a null...

Debian DSA-1273-1 : nas - several vulnerabilities

Several vulnerabilities have been discovered in nas, the Network Audio System. - CVE-2007-1543 A stack-based buffer overflow in the acceptattlocal function in server/os/connection.c in nas allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection. -...

USN-446-1: NAS vulnerabilities

Luigi Auriemma discovered multiple flaws in the Network Audio System server. Remote attackers could send specially crafted network requests that could lead to a denial of service or execution of arbitrary code. Note that default Ubuntu installs do not include the NAS server...

[SECURITY] [DSA 1273-1] New nas packages fix multiple remote vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1273-1 [email protected] http://www.debian.org/security/ Noah Meyerhans March 27, 2007 - ------------------------------------------------------------------------ Package : nas Vulnerability :...

[SECURITY] [DSA 1273-1] New nas packages fix multiple remote vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1273-1 [email protected] http://www.debian.org/security/ Noah Meyerhans March 27, 2007 - ------------------------------------------------------------------------ Package : nas Vulnerability :...

[NEWS] Multiple Vulnerabilities In NAS

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

CVE-2007-1546

Array index error in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service crash via 1 large numaction values in the ProcAuSetElements function in server/dia/audispatch.c or 2 a large inputNum parameter to the compileInputs function in server/dia/auutil...

Code injection

The AddResource function in server/dia/resource.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service server crash via a nonexistent client ID...

Command injection

Array index error in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service crash via 1 large numaction values in the ProcAuSetElements function in server/dia/audispatch.c or 2 a large inputNum parameter to the compileInputs function in server/dia/auutil...

CVE-2007-1545

CVE-2007-1545 is a vulnerability in Network Audio System (NAS) prior to NAS 1.8a SVN 237 where the AddResource function can crash the server via a nonexistent client ID, enabling a remote denial of service. The connected Debian advisory (DSA-1273-1) enumerates five NAS flaws (CVE-2007-1543 to CVE...

CVE-2007-1543

The CVE-2007-1543 issue affects Network Audio System (NAS) prior to 1.8a SVN 237. A stack-based buffer overflow in accept_att_local (server/os/connection.c) can be triggered by a long path slave name over a USL socket, enabling remote code execution. Other CVEs (CVE-2007-1544 to CVE-2007-1547) ac...

CVE-2007-1544

CVE-2007-1544 affects the Network Audio System (nas) server. A stack/integer overflow in ProcAuWriteElement (server/dia/audispatch.c) in NAS versions before 1.8a SVN 237 enables a remote attacker to crash the service and potentially execute arbitrary code via a large max_samples value. This is on...