[SECURITY] Fedora 18 Update: nas-1.9.3-4.fc18

In a nutshell, NAS is the audio equivalent of an X display server. The Network Audio System NAS was developed by NCD for playing, recording, and manipulating audio data over a network. Like the X Window System, it uses the client/server model to separate applications from the specific drivers tha...

[SECURITY] Fedora 19 Update: nas-1.9.3-7.fc19

In a nutshell, NAS is the audio equivalent of an X display server. The Network Audio System NAS was developed by NCD for playing, recording, and manipulating audio data over a network. Like the X Window System, it uses the client/server model to separate applications from the specific drivers tha...

[SECURITY] Fedora 20 Update: nas-1.9.3-9.fc20

In a nutshell, NAS is the audio equivalent of an X display server. The Network Audio System NAS was developed by NCD for playing, recording, and manipulating audio data over a network. Like the X Window System, it uses the client/server model to separate applications from the specific drivers tha...

CVE-2013-4256

Multiple stack-based and heap-based buffer overflows in Network Audio System NAS 1.9.3 allow local users to cause a denial of service crash or possibly execute arbitrary code via the 1 display command argument to the ProcessCommandLine function in server/os/utils.c; 2 ResetHosts function in...

SHOUTcast DNAS/win32 1.9.4 File Request Format String Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'SHOUTcast...

Mandriva Update for nas MDKSA-2007:065 (nas)

Check for the Version of nas OpenVAS Vulnerability Test Mandriva Update for nas MDKSA-2007:065 nas Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Ubuntu Update for nas vulnerabilities USN-446-1

Ubuntu Update for Linux kernel vulnerabilities USN-446-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4461.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for nas vulnerabilities USN-446-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Gentoo Security Advisory GLSA 200704-20 (NAS)

The remote host is missing updates announced in advisory GLSA 200704-20. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Security Advisory DSA 1273-1 (nas)

The remote host is missing an update to nas announced via advisory DSA 1273-1. Several vulnerabilities have been discovered in nas, the Network Audio System. CVE-2007-1543 A stack-based buffer overflow in the acceptattlocal function in server/os/connection.c in nas allows remote attackers to...

Debian DSA-1273-1 : nas - several vulnerabilities

Several vulnerabilities have been discovered in nas, the Network Audio System. - CVE-2007-1543 A stack-based buffer overflow in the acceptattlocal function in server/os/connection.c in nas allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection. -...

USN-446-1: NAS vulnerabilities

Luigi Auriemma discovered multiple flaws in the Network Audio System server. Remote attackers could send specially crafted network requests that could lead to a denial of service or execution of arbitrary code. Note that default Ubuntu installs do not include the NAS server...

[SECURITY] [DSA 1273-1] New nas packages fix multiple remote vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1273-1 [email protected] http://www.debian.org/security/ Noah Meyerhans March 27, 2007 - ------------------------------------------------------------------------ Package : nas Vulnerability :...

DSA-1273-1 nas - several vulnerabilities

Bulletin has no description...

Mandrake Linux Security Advisory : nas (MDKSA-2007:065)

Luigi Auriemma discovered a number of problems with the nas Network Audio System daemon that could be used to crash nasd. Updated packages have been patched to address this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

[NEWS] Multiple Vulnerabilities In NAS

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...

Network Audio System DoS

No description provided...

Network Audio System本地特权提升和拒绝服务漏洞

Network Audio System是一款类似X服务器的网络传送音频系统，运行以ROOT权限下。 Network Audio System存在多个安全问题，远程攻击者可以利用漏洞进行拒绝服务或者缓冲区溢出攻击。 问题包括： 1，通过USL连接存在acceptattlocal缓冲区溢出。 2，通过在AddResource不存在的ID可是服务终止。 3，在ProcAuSetElements中通过大的numactions可导致非法内存指针引用而使应用程序崩溃。 4，在ProcAuWriteElement中存在整数溢出在bcopy时可导致崩溃。...

CVE-2007-1543

Stack-based buffer overflow in the acceptattlocal function in server/os/connection.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection...

CVE-2007-1546

Array index error in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to cause a denial of service crash via 1 large numaction values in the ProcAuSetElements function in server/dia/audispatch.c or 2 a large inputNum parameter to the compileInputs function in server/dia/auutil...

Stack overflow

Stack-based buffer overflow in the acceptattlocal function in server/os/connection.c in Network Audio System NAS before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection...