CVE-2007-1546

Related Files

Gentoo Linux Security Advisory 200704-20

Posted Apr 24, 2007

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory GLSA 200704-20 - Luigi Auriemma has discovered multiple vulnerabilities in NAS, some of which include a buffer overflow in the function accept_att_local(), an integer overflow in the function ProcAuWriteElement(), and a null pointer error in the function ReadRequestFromClient(). Versions less than 1.8b are affected.

tags | advisory, overflow, vulnerability

systems | linux, gentoo

advisories | CVE-2007-1543, CVE-2007-1544, CVE-2007-1545, CVE-2007-1546, CVE-2007-1547

SHA-256 | 1b1fc75c1301e61b9e4c99459a4dc73a21d41a123e92c98f299fe1ba654484bc

Download | Favorite | View

Ubuntu Security Notice 446-1

Posted Mar 29, 2007

Authored by Ubuntu | Site security.ubuntu.com

Ubuntu Security Notice 446-1 - Luigi Auriemma discovered multiple flaws in the Network Audio System server. Remote attackers could send specially crafted network requests that could lead to a denial of service or execution of arbitrary code. Note that default Ubuntu installs do not include the NAS server.

tags | advisory, remote, denial of service, arbitrary

systems | linux, ubuntu

advisories | CVE-2007-1543, CVE-2007-1544, CVE-2007-1545, CVE-2007-1546, CVE-2007-1547

SHA-256 | 70182c94e3f51e81e47b50a49898f13ce894a2bea871e34d56bbf70f827415d5

Download | Favorite | View

Debian Linux Security Advisory 1273-1

Posted Mar 28, 2007

Authored by Debian | Site debian.org

Debian Security Advisory 1273-1 - Several vulnerabilities have been discovered in nas, the Network Audio System. A stack-based buffer overflow in the accept_att_local function in server/os/connection.c in nas allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection. Integer overflow in the ProcAuWriteElement function in server/dia/audispatch.c allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large max_samples value. The AddResource function in server/dia/resource.c allows remote attackers to cause a denial of service (server crash) via a nonexistent client ID. Array index error allows remote attackers to cause a denial of service (crash) via (1) large num_action values in the ProcAuSetElements function in server/dia/audispatch.c or (2) a large inputNum parameter to the compileInputs function in server/dia/auutil.c. The ReadRequestFromClient function in server/os/io.c allows remote attackers to cause a denial of service (crash) via multiple simultaneous connections, which triggers a NULL pointer dereference.

tags | advisory, remote, denial of service, overflow, arbitrary, vulnerability

systems | linux, debian

advisories | CVE-2007-1543, CVE-2007-1544, CVE-2007-1545, CVE-2007-1546, CVE-2007-1547

SHA-256 | 1e4f485fabdc7a6df39aba602cc017d7080e34af96a042dda8fc9d8dddd5c602

Download | Favorite | View