CVE-2013-4258

CVE-2013-4258 affects Network Audio System (NAS) 1.9.3. A format string vulnerability in the osLogMsg function (server/os/aulog.c) can allow remote attackers to crash NAS or possibly execute arbitrary code via format specifiers related to syslog. Public advisories note multiple vulnerabilities in...

CVE-2013-4256

CVE-2013-4256 describes multiple stack-based and heap-based buffer overflows in Network Audio System (NAS) 1.9.3 that could allow a local attacker to crash the process or potentially execute arbitrary code via several NAS server modules (e.g., ProcessCommandLine, ResetHosts, various open/unix soc...

CVE-2007-1544

CVE-2007-1544 affects the Network Audio System (nas) server. A stack/integer overflow in ProcAuWriteElement (server/dia/audispatch.c) in NAS versions before 1.8a SVN 237 enables a remote attacker to crash the service and potentially execute arbitrary code via a large max_samples value. This is on...

CVE-2007-1543

The CVE-2007-1543 issue affects Network Audio System (NAS) prior to 1.8a SVN 237. A stack-based buffer overflow in accept_att_local (server/os/connection.c) can be triggered by a long path slave name over a USL socket, enabling remote code execution. Other CVEs (CVE-2007-1544 to CVE-2007-1547) ac...

CVE-2007-1545

CVE-2007-1545 is a vulnerability in Network Audio System (NAS) prior to NAS 1.8a SVN 237 where the AddResource function can crash the server via a nonexistent client ID, enabling a remote denial of service. The connected Debian advisory (DSA-1273-1) enumerates five NAS flaws (CVE-2007-1543 to CVE...

CVE-2007-1546

CVE-2007-1546 affects the Network Audio System (NAS) prior to 1.8a SVN 237. The vulnerability is an array index error in NAS code paths: ProcAuSetElements (server/dia/audispatch.c) and compileInputs (server/dia/auutil.c). A remote attacker can trigger a denial of service (crash) by sending large ...

CVE-2007-1547

Vulnerability (CVE-2007-1547) affects the Network Audio System (NAS). The issue is in the ReadRequestFromClient function (server/os/io.c) where handling multiple simultaneous connections can trigger a NULL pointer dereference, allowing a remote attacker to cause a crash (DoS). Affected software i...