PT-2013-1051

Name of the Vulnerable Software and Affected Versions Network Audio System NAS version 1.9.3 Description The issue involves multiple stack-based and heap-based buffer overflows that can be exploited by local users to cause a denial of service or possibly execute arbitrary code. This can be achiev...

CVE-2013-4258: Use of Externally-Controlled Format String

Format string vulnerability in the osLogMsg function in server/os/aulog.c in Network Audio System NAS 1.9.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in unspecified vectors, related to syslog...

CVE-2007-1546: Undefined Security Weakness

Array index error in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service crash via 1 large numaction values in the ProcAuSetElements function in server/dia/audispatch.c or 2 a large inputNum parameter to the compileInputs function in server/dia/auutil...

CVE-2007-1545: Undefined Security Weakness

The AddResource function in server/dia/resource.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service server crash via a nonexistent client ID...

CVE-2007-1543: Undefined Security Weakness

Stack-based buffer overflow in the acceptattlocal function in server/os/connection.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection...