CVE-2013-4256

CVE-2013-4256 describes multiple stack-based and heap-based buffer overflows in Network Audio System (NAS) 1.9.3 that could allow a local attacker to crash the process or potentially execute arbitrary code via several NAS server modules (e.g., ProcessCommandLine, ResetHosts, various open/unix soc...

CVE-2013-4258

CVE-2013-4258 affects Network Audio System (NAS) 1.9.3. A format string vulnerability in the osLogMsg function (server/os/aulog.c) can allow remote attackers to crash NAS or possibly execute arbitrary code via format specifiers related to syslog. Public advisories note multiple vulnerabilities in...

CVE-2013-4256

Multiple stack-based and heap-based buffer overflows in Network Audio System NAS 1.9.3 allow local users to cause a denial of service crash or possibly execute arbitrary code via the 1 display command argument to the ProcessCommandLine function in server/os/utils.c; 2 ResetHosts function in...

CVE-2013-4258

Format string vulnerability in the osLogMsg function in server/os/aulog.c in Network Audio System NAS 1.9.3 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in unspecified vectors, related to syslog...

Debian Security Advisory DSA 2771-1 (nas - several vulnerabilities)

Hamid Zamani discovered multiple security problems buffer overflows, format string vulnerabilities and missing input sanitising, which could lead to the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb2771.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA...

Fedora Update for nas FEDORA-2013-17036

Check for the Version of nas OpenVAS Vulnerability Test Fedora Update for nas FEDORA-2013-17036 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[USN-1986-1] Network Audio System (NAS) vulnerabilities

========================================================================== Ubuntu Security Notice USN-1986-1 October 01, 2013 nas vulnerabilities ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: -...

Ubuntu 12.04 LTS / 12.10 / 13.04 : nas vulnerabilities (USN-1986-1)

Hamid Zamani discovered multiple security issues in the Network Audio System NAS server. An attacker could possibly use these issues to cause a denial of service or execute arbitrary code. CVE-2013-4256, CVE-2013-4257. Note that Tenable Network Security has extracted the preceding description blo...

USN-1986-1: Network Audio System (NAS) vulnerabilities

Hamid Zamani discovered multiple security issues in the Network Audio System NAS server. An attacker could possibly use these issues to cause a denial of service or execute arbitrary code. CVE-2013-4256, CVE-2013-4257...

[SECURITY] Fedora 18 Update: nas-1.9.3-4.fc18

In a nutshell, NAS is the audio equivalent of an X display server. The Network Audio System NAS was developed by NCD for playing, recording, and manipulating audio data over a network. Like the X Window System, it uses the client/server model to separate applications from the specific drivers tha...

[SECURITY] Fedora 19 Update: nas-1.9.3-7.fc19

In a nutshell, NAS is the audio equivalent of an X display server. The Network Audio System NAS was developed by NCD for playing, recording, and manipulating audio data over a network. Like the X Window System, it uses the client/server model to separate applications from the specific drivers tha...

[SECURITY] Fedora 20 Update: nas-1.9.3-9.fc20

In a nutshell, NAS is the audio equivalent of an X display server. The Network Audio System NAS was developed by NCD for playing, recording, and manipulating audio data over a network. Like the X Window System, it uses the client/server model to separate applications from the specific drivers tha...

CVE-2013-4256

Multiple stack-based and heap-based buffer overflows in Network Audio System NAS 1.9.3 allow local users to cause a denial of service crash or possibly execute arbitrary code via the 1 display command argument to the ProcessCommandLine function in server/os/utils.c; 2 ResetHosts function in...

Mandriva Update for nas MDKSA-2007:065 (nas)

Check for the Version of nas OpenVAS Vulnerability Test Mandriva Update for nas MDKSA-2007:065 nas Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Ubuntu Update for nas vulnerabilities USN-446-1

Ubuntu Update for Linux kernel vulnerabilities USN-446-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4461.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for nas vulnerabilities USN-446-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Gentoo Security Advisory GLSA 200704-20 (NAS)

The remote host is missing updates announced in advisory GLSA 200704-20. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1273-1 (nas)

The remote host is missing an update to nas announced via advisory DSA 1273-1. Several vulnerabilities have been discovered in nas, the Network Audio System. CVE-2007-1543 A stack-based buffer overflow in the acceptattlocal function in server/os/connection.c in nas allows remote attackers to...

Debian DSA-1273-1 : nas - several vulnerabilities

Several vulnerabilities have been discovered in nas, the Network Audio System. - CVE-2007-1543 A stack-based buffer overflow in the acceptattlocal function in server/os/connection.c in nas allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection. -...

USN-446-1: NAS vulnerabilities

Luigi Auriemma discovered multiple flaws in the Network Audio System server. Remote attackers could send specially crafted network requests that could lead to a denial of service or execution of arbitrary code. Note that default Ubuntu installs do not include the NAS server...

[SECURITY] [DSA 1273-1] New nas packages fix multiple remote vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1273-1 [email protected] http://www.debian.org/security/ Noah Meyerhans March 27, 2007 - ------------------------------------------------------------------------ Package : nas Vulnerability :...