CVE-2007-1543

The CVE-2007-1543 issue affects Network Audio System (NAS) prior to 1.8a SVN 237. A stack-based buffer overflow in accept_att_local (server/os/connection.c) can be triggered by a long path slave name over a USL socket, enabling remote code execution. Other CVEs (CVE-2007-1544 to CVE-2007-1547) ac...

CVE-2007-1545

The AddResource function in server/dia/resource.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service server crash via a nonexistent client ID...

CVE-2007-1543

Stack-based buffer overflow in the acceptattlocal function in server/os/connection.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection...

CVE-2007-1545

The AddResource function in server/dia/resource.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service server crash via a nonexistent client ID...

CVE-2007-1547: Undefined Security Weakness

The ReadRequestFromClient function in server/os/io.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service crash via multiple simultaneous connections, which triggers a NULL pointer dereference...

CVE-2007-1545: Undefined Security Weakness

The AddResource function in server/dia/resource.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service server crash via a nonexistent client ID...

CVE-2007-1546: Undefined Security Weakness

Array index error in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service crash via 1 large numaction values in the ProcAuSetElements function in server/dia/audispatch.c or 2 a large inputNum parameter to the compileInputs function in server/dia/auutil...

CVE-2007-1543: Undefined Security Weakness

Stack-based buffer overflow in the acceptattlocal function in server/os/connection.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection...

CVE-2007-1544: Undefined Security Weakness

Integer overflow in the ProcAuWriteElement function in server/dia/audispatch.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large maxsamples value...

Update Protection against SHOUTcast Format String Vulnerability

SHOUTcast is Nullsoft's streaming audio system for Linux and Microsoft Windows platforms. A format string vulnerability was reported in SHOUTcast. A malicious attacker with the ability to send a formatted URL request to the SHOUTcast server may be able to execute arbitrary code on the target syst...