DSA-1273-1 nas - several vulnerabilities

Bulletin has no description...

Mandrake Linux Security Advisory : nas (MDKSA-2007:065)

Luigi Auriemma discovered a number of problems with the nas Network Audio System daemon that could be used to crash nasd. Updated packages have been patched to address this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[NEWS] Multiple Vulnerabilities In NAS

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Network Audio System DoS

No description provided...

Network Audio System本地特权提升和拒绝服务漏洞

Network Audio System是一款类似X服务器的网络传送音频系统，运行以ROOT权限下。 Network Audio System存在多个安全问题，远程攻击者可以利用漏洞进行拒绝服务或者缓冲区溢出攻击。 问题包括： 1，通过USL连接存在acceptattlocal缓冲区溢出。 2，通过在AddResource不存在的ID可是服务终止。 3，在ProcAuSetElements中通过大的numactions可导致非法内存指针引用而使应用程序崩溃。 4，在ProcAuWriteElement中存在整数溢出在bcopy时可导致崩溃。...

CVE-2007-1543

Stack-based buffer overflow in the acceptattlocal function in server/os/connection.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection...

CVE-2007-1544

Integer overflow in the ProcAuWriteElement function in server/dia/audispatch.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large maxsamples value...

CVE-2007-1544

Integer overflow in the ProcAuWriteElement function in server/dia/audispatch.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large maxsamples value...

Integer overflow

Integer overflow in the ProcAuWriteElement function in server/dia/audispatch.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large maxsamples value...

DEBIAN-CVE-2007-1546

Array index error in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service crash via 1 large numaction values in the ProcAuSetElements function in server/dia/audispatch.c or 2 a large inputNum parameter to the compileInputs function in server/dia/auutil...

DEBIAN-CVE-2007-1547

The ReadRequestFromClient function in server/os/io.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service crash via multiple simultaneous connections, which triggers a NULL pointer dereference...

DEBIAN-CVE-2007-1544

Integer overflow in the ProcAuWriteElement function in server/dia/audispatch.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a large maxsamples value...

CVE-2007-1546

Array index error in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service crash via 1 large numaction values in the ProcAuSetElements function in server/dia/audispatch.c or 2 a large inputNum parameter to the compileInputs function in server/dia/auutil...

CVE-2007-1545

The AddResource function in server/dia/resource.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service server crash via a nonexistent client ID...

CVE-2007-1547

The ReadRequestFromClient function in server/os/io.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service crash via multiple simultaneous connections, which triggers a NULL pointer dereference...

CVE-2007-1543

Stack-based buffer overflow in the acceptattlocal function in server/os/connection.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection...

Stack overflow

Stack-based buffer overflow in the acceptattlocal function in server/os/connection.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection...

CVE-2007-1546

Array index error in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service crash via 1 large numaction values in the ProcAuSetElements function in server/dia/audispatch.c or 2 a large inputNum parameter to the compileInputs function in server/dia/auutil...

CVE-2007-1547

The ReadRequestFromClient function in server/os/io.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service crash via multiple simultaneous connections, which triggers a NULL pointer dereference...

Command injection

Array index error in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service crash via 1 large numaction values in the ProcAuSetElements function in server/dia/audispatch.c or 2 a large inputNum parameter to the compileInputs function in server/dia/auutil...