2625 matches found
CVE-2007-1547
Vulnerability (CVE-2007-1547) affects the Network Audio System (NAS). The issue is in the ReadRequestFromClient function (server/os/io.c) where handling multiple simultaneous connections can trigger a NULL pointer dereference, allowing a remote attacker to cause a crash (DoS). Affected software i...
CVE-2007-1546
CVE-2007-1546 affects the Network Audio System (NAS) prior to 1.8a SVN 237. The vulnerability is an array index error in NAS code paths: ProcAuSetElements (server/dia/audispatch.c) and compileInputs (server/dia/auutil.c). A remote attacker can trigger a denial of service (crash) by sending large ...
CVE-2007-1543
Stack-based buffer overflow in the acceptattlocal function in server/os/connection.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection...
CVE-2007-1545: Undefined Security Weakness
The AddResource function in server/dia/resource.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service server crash via a nonexistent client ID...
CVE-2007-1543: Undefined Security Weakness
Stack-based buffer overflow in the acceptattlocal function in server/os/connection.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection...
CVE-2007-1546: Undefined Security Weakness
Array index error in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service crash via 1 large numaction values in the ProcAuSetElements function in server/dia/audispatch.c or 2 a large inputNum parameter to the compileInputs function in server/dia/auutil...
CVE-2006-3878: Undefined Security Weakness
Opsware Network Automation System NAS 6.0 installs /etc/init.d/mysql with insecure permissions, which allows local users to read the root password for the MySQL MAX database or gain privileges by modifying /etc/init.d/mysql...
CVE-2006-3878
CVE-2006-3878 concerns Opsware Network Automation System (NAS) 6.0. The issue arises because NAS installs /etc/init.d/mysql with insecure permissions, enabling local users to read the root password for the MySQL MAX database or gain privileges by modifying /etc/init.d/mysql. The root cause is imp...
Opsware NAS 6.0 reveals MySQL 'root' password
The Opsware Network Automation System NAS version 6.0 installation places an 'init' style startup script in /etc/init.d/mysqll and places the 'root' password that you choose for the MySQL MAX database during installation. The permissions on this small shell script are world readable, allowing any...
CVE-2002-1949
The Network Attached Storage NAS Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackers to sniff the administrative password...
CVE-2002-1863
Iomega Network Attached Storage (NAS) A300U (and possibly other models) has a vulnerability where the FTP service cannot be disabled, enabling local users to access home directories via FTP even when access to all shared directories is disabled. Affected component: FTP enablement/disable control ...
CVE-2002-1955
Technical details (affected products, versions, root cause, or fixes) are not publicly provided in the supplied documents. Monitor for updates.
CVE-2002-1949
CVE-2002-1949 affects Iomega NAS A300U Admin Web Page, where credentials are transmitted in cleartext over the network, enabling remote password sniffing. Connected docs corroborate the issue and provide limited remediation guidance: IBM bulletin notes remediations for Jazz Foundation products (u...
CVE-2002-1955
Iomega NAS A300U uses cleartext LANMAN authentication when mounting CIFS/SMB drives, which allows remote attackers to perform a man-in-the-middle attack...
CVE-2002-1949: Cleartext Transmission of Sensitive Information
The Network Attached Storage NAS Administration Web Page for Iomega NAS A300U transmits passwords in cleartext, which allows remote attackers to sniff the administrative password...
CVE-2002-1955: Undefined Security Weakness
Iomega NAS A300U uses cleartext LANMAN authentication when mounting CIFS/SMB drives, which allows remote attackers to perform a man-in-the-middle attack...
CVE-2002-1863: Undefined Security Weakness
Iomega Network Attached Storage NAS A300U, and possibly other models, does not allow the FTP service to be disabled, which allows local users to access home directories via FTP even when access to all shared directories have been disabled...
CVE-2003-0450
Cistron RADIUS daemon radiusd-cistron 1.6.6 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary code via a large value in an NAS-Port attribute, which is interpreted as a negative number and causes a buffer overflow...
CVE-2003-0450
The CVE-2003-0450 issue affects Cistron RADIUS daemon (radiusd-cistron) older than or equal to 1.6.6. The vulnerability arises when processing a large NAS-Port attribute, which is interpreted as a negative value and triggers a buffer overflow. This can lead to a remote denial of service and, in s...