nas: CVE-2013-4256 CVE-2013-4257 CVE-2013-4258

Debian Bug report logs - #720287
nas: CVE-2013-4256 CVE-2013-4257 CVE-2013-4258

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: nas: CVE-2013-4256 CVE-2013-4257 CVE-2013-4258

Date: Tue, 20 Aug 2013 06:38:20 +0200

Package: nas
Severity: grave
Tags: security upstream patch

Hi,

the following vulnerabilities were published for nas (originally
reported by Hamid Zamani):

CVE-2013-4256[0]:
Buffer Overflows

CVE-2013-4257[1]:
Heap Overflow

CVE-2013-4258[2]:
Format string

If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

Patches are also available, see [3] and [4].

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4256
    http://security-tracker.debian.org/tracker/CVE-2013-4256
[1] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4257
    http://security-tracker.debian.org/tracker/CVE-2013-4257
[2] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4258
    http://security-tracker.debian.org/tracker/CVE-2013-4258
[3] http://radscan.com/pipermail/nas/2013-August/001270.html
[4] http://marc.info/?l=oss-security&m=137694353908055&w=2

Please adjust the affected versions in the BTS as needed, 1.9.3 was
confirmed by the reporter, but might also be present in 1.9.2.

Regards,
Salvatore

Message #10 received at 720287-close@bugs.debian.org (full text, mbox, reply):

From: Steve McIntyre <93sam@debian.org>

To: 720287-close@bugs.debian.org

Subject: Bug#720287: fixed in nas 1.9.3-6

Date: Wed, 28 Aug 2013 00:19:09 +0000

Source: nas
Source-Version: 1.9.3-6

We believe that the bug you reported is fixed in the latest version of
nas, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 720287@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Steve McIntyre <93sam@debian.org> (supplier of updated nas package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Fri, 23 Aug 2013 00:35:04 +0100
Source: nas
Binary: libaudio2 nas libaudio-dev nas-bin nas-doc
Architecture: source all amd64
Version: 1.9.3-6
Distribution: unstable
Urgency: high
Maintainer: Steve McIntyre <93sam@debian.org>
Changed-By: Steve McIntyre <93sam@debian.org>
Description: 
 libaudio-dev - Network Audio System - development files
 libaudio2  - Network Audio System - shared libraries
 nas        - Network Audio System - local server
 nas-bin    - Network Audio System - client binaries
 nas-doc    - Network Audio System - extra documentation
Closes: 720287
Changes: 
 nas (1.9.3-6) unstable; urgency=high
 .
   * Fixes for various long-standing security issues found by Hamid
     Zamani <me@hamidx9.ir>. Closes: #720287
     + Validate the port offset of nasd to fix a potential buffer overflow
       (CVE-2013-4256)
     + Use better string functions to guard against heap overflows
       (CVE-2013-4257)
     + Sanity-check the TCP_DEVICE environment variable to remove a format
       string bug (CVE-2013-4258)
Checksums-Sha1: 
 44fed3d9055d9890c925baf42e701e375a37a1ca 1890 nas_1.9.3-6.dsc
 f2b3baddd2f637146ae6b1be45c1c3ad6d0eb581 44723 nas_1.9.3-6.diff.gz
 fd55da4f34ed0c1581e27d1dc57307c536ed12f9 158284 nas-doc_1.9.3-6_all.deb
 46979d70fb345ff65f86c7690674991d23dcf543 110812 nas_1.9.3-6_amd64.deb
 e9e925bd8da069af56244fef8c9a675d3b1a9449 148378 nas-bin_1.9.3-6_amd64.deb
 9d90b03bf5f02ebee04e9842162612e6f9ba738e 78326 libaudio2_1.9.3-6_amd64.deb
 fb883a9fef0b98f2db941ae693ba613c9e52317c 420278 libaudio-dev_1.9.3-6_amd64.deb
Checksums-Sha256: 
 d813d63a5c043d5e0362cc2069405d46482d6050ce6ef240b20f64787a38cc03 1890 nas_1.9.3-6.dsc
 0df3509d5350efa15f79aa769b287067475af128fe8a443cf6e729d2941b238e 44723 nas_1.9.3-6.diff.gz
 35fe49c8e681078a021c3420d5911ba530ffced2a5972bea7b3d0cc88f0acfc5 158284 nas-doc_1.9.3-6_all.deb
 26ad5071526af4f7083fa78b86546747adb3ef21d9cf5bb09d73fe83161e29b3 110812 nas_1.9.3-6_amd64.deb
 646f23fc2bafa4631d99097291e0e7821e23fef4457e05ec98f2fc17c1543600 148378 nas-bin_1.9.3-6_amd64.deb
 f475c4f9638f845f028dceb7e9315e20fdb30fe7325491b47c44fe08f7c9dadb 78326 libaudio2_1.9.3-6_amd64.deb
 d29222f02204ab48c8873f01aef0900fad0092d65553447d6c655066a01f4573 420278 libaudio-dev_1.9.3-6_amd64.deb
Files: 
 6b241e2bf715c454ba8c582d11321e65 1890 sound optional nas_1.9.3-6.dsc
 b2eaf2745167196c247ec5a842fd9ef5 44723 sound optional nas_1.9.3-6.diff.gz
 9f4cfc202ee495113193a3c81c3d4cf4 158284 doc extra nas-doc_1.9.3-6_all.deb
 ad3545ad3713b24086db31fea0002f00 110812 sound optional nas_1.9.3-6_amd64.deb
 f2c87702652bd8bb38a4cc5b8cae39ea 148378 sound extra nas-bin_1.9.3-6_amd64.deb
 ca71ec5b837ce6b4856b513050c94792 78326 libs optional libaudio2_1.9.3-6_amd64.deb
 047e0688dc404e3857059e157b06e5d0 420278 libdevel optional libaudio-dev_1.9.3-6_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=Rd8B
-----END PGP SIGNATURE-----

Message #15 received at 720287-close@bugs.debian.org (full text, mbox, reply):

From: Steve McIntyre <93sam@debian.org>

To: 720287-close@bugs.debian.org

Subject: Bug#720287: fixed in nas 1.9.3-5wheezy1

Date: Sat, 12 Oct 2013 19:54:03 +0000

Source: nas
Source-Version: 1.9.3-5wheezy1

We believe that the bug you reported is fixed in the latest version of
nas, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 720287@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Steve McIntyre <93sam@debian.org> (supplier of updated nas package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Wed, 28 Aug 2013 00:40:42 +0100
Source: nas
Binary: libaudio2 nas libaudio-dev nas-bin nas-doc
Architecture: source all amd64
Version: 1.9.3-5wheezy1
Distribution: stable-security
Urgency: high
Maintainer: Steve McIntyre <93sam@debian.org>
Changed-By: Steve McIntyre <93sam@debian.org>
Description: 
 libaudio-dev - Network Audio System - development files
 libaudio2  - Network Audio System - shared libraries
 nas        - Network Audio System - local server
 nas-bin    - Network Audio System - client binaries
 nas-doc    - Network Audio System - extra documentation
Closes: 720287
Changes: 
 nas (1.9.3-5wheezy1) stable-security; urgency=high
 .
   * Fixes for various long-standing security issues found by Hamid
     Zamani <me@hamidx9.ir>. Closes: #720287
     + Validate the port offset of nasd to fix a potential buffer overflow
       (CVE-2013-4256)
     + Use better string functions to guard against heap overflows
       (CVE-2013-4257)
     + Sanity-check the TCP_DEVICE environment variable to remove a format
       string bug (CVE-2013-4258)
Checksums-Sha1: 
 15cf04efaadb0b64b769b974160e3b1af19905a8 1918 nas_1.9.3-5wheezy1.dsc
 dca770ddd10936ad1f19bf3c51f941c10d7bf84b 1485222 nas_1.9.3.orig.tar.gz
 19926aeb893f5c4d77823c52e27f026aba7a4b17 44709 nas_1.9.3-5wheezy1.diff.gz
 b861612f0acdc6eb66bb88e3ca6e3665bddc436e 159338 nas-doc_1.9.3-5wheezy1_all.deb
 801dcb1aeec18e7eb8b01aa7c85ad613125ea40a 122280 nas_1.9.3-5wheezy1_amd64.deb
 391607fd96f3950fc46b96ea0f187e608bfd7b19 182714 nas-bin_1.9.3-5wheezy1_amd64.deb
 ad4738865ea994cf8a243dc7e093839908aacc90 87082 libaudio2_1.9.3-5wheezy1_amd64.deb
 175b070edb5dcafb1c206d697dc33eb420ef50ef 613012 libaudio-dev_1.9.3-5wheezy1_amd64.deb
Checksums-Sha256: 
 b9e52ca93208e5a0b7dec68df90564c24dae251f14561edb0a4dd20f0aef6bcc 1918 nas_1.9.3-5wheezy1.dsc
 cd2c12980f812d6c7e08f48d00a2b7f85a040b3f587b177d4c1f03600a6ae7a9 1485222 nas_1.9.3.orig.tar.gz
 db1a6c4896343f278d178b7075027237a49758908d3abef67b8ae9fcae07d756 44709 nas_1.9.3-5wheezy1.diff.gz
 b2570899b77c37bc846a328ddc75d76b1644c45672df13792987e9aa7f03c910 159338 nas-doc_1.9.3-5wheezy1_all.deb
 cf38ddd23ff511d3a86d5a04d481ae3ed764ceff3a3c0cb333d8ec325ad8781e 122280 nas_1.9.3-5wheezy1_amd64.deb
 15c679d986ddecfa705fed0d3470a17cdc55dd459ed8e5b19c2a78da1b8007bc 182714 nas-bin_1.9.3-5wheezy1_amd64.deb
 af48f88ea16df216f5d85414d8c08c2282ce7e1597ddbd3cb2a4aa125a19828e 87082 libaudio2_1.9.3-5wheezy1_amd64.deb
 338a316913de57a7667f91d11e4086f941f384953dcb695d3b4e580b6850cc6a 613012 libaudio-dev_1.9.3-5wheezy1_amd64.deb
Files: 
 f8e1a604b6d6e9ae8b36079d49bfb2b5 1918 sound optional nas_1.9.3-5wheezy1.dsc
 ecd01a3b4e17a9d464efa83a03618025 1485222 sound optional nas_1.9.3.orig.tar.gz
 9533179408c3d9d09add7e08b1c2fbbc 44709 sound optional nas_1.9.3-5wheezy1.diff.gz
 2365ecf99d30ed8b72a256bf4c6d1a44 159338 doc extra nas-doc_1.9.3-5wheezy1_all.deb
 98983c83bd575277d1844e8851b91764 122280 sound optional nas_1.9.3-5wheezy1_amd64.deb
 f4fe6927e4c697b78ea7260073d35e22 182714 sound extra nas-bin_1.9.3-5wheezy1_amd64.deb
 e950aecb9abed263d0cfe58469416a2b 87082 libs optional libaudio2_1.9.3-5wheezy1_amd64.deb
 4104915c56bfe816b5a594c57883f2a0 613012 libdevel optional libaudio-dev_1.9.3-5wheezy1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=a3KT
-----END PGP SIGNATURE-----

Message #20 received at 720287-close@bugs.debian.org (full text, mbox, reply):

From: Steve McIntyre <93sam@debian.org>

To: 720287-close@bugs.debian.org

Subject: Bug#720287: fixed in nas 1.9.2-4squeeze1

Date: Mon, 21 Oct 2013 19:47:23 +0000

Source: nas
Source-Version: 1.9.2-4squeeze1

We believe that the bug you reported is fixed in the latest version of
nas, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 720287@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Steve McIntyre <93sam@debian.org> (supplier of updated nas package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sat, 14 Sep 2013 23:45:44 +0100
Source: nas
Binary: libaudio2 nas libaudio-dev nas-bin nas-doc
Architecture: source all amd64
Version: 1.9.2-4squeeze1
Distribution: oldstable-security
Urgency: high
Maintainer: Steve McIntyre <93sam@debian.org>
Changed-By: Steve McIntyre <93sam@debian.org>
Description: 
 libaudio-dev - Network Audio System - development files
 libaudio2  - Network Audio System - shared libraries
 nas        - Network Audio System - local server
 nas-bin    - Network Audio System - client binaries
 nas-doc    - Network Audio System - extra documentation
Closes: 720287
Changes: 
 nas (1.9.2-4squeeze1) oldstable-security; urgency=high
 .
   * Fixes for various long-standing security issues found by Hamid
     Zamani <me@hamidx9.ir>. Closes: #720287
     + Validate the port offset of nasd to fix a potential buffer overflow
       (CVE-2013-4256)
     + Use better string functions to guard against heap overflows
       (CVE-2013-4257)
     + Sanity-check the TCP_DEVICE environment variable for safety.
   * Fix string handling in aulog.c:osLogMsg() to fix missing format string
     in call to syslog() (CVE-2013-4258).
Checksums-Sha1: 
 0734b1bbb48014097233eb81cb3c1807d35b28d4 1755 nas_1.9.2-4squeeze1.dsc
 b1d439c87eef89838ad463c140d0b9ca0f823f5e 1484369 nas_1.9.2.orig.tar.gz
 9e7a8358e76fb0db056bab57c864ac548f29b134 43710 nas_1.9.2-4squeeze1.diff.gz
 678e1bc070685ec52a121872cf231143e9c7c9f8 158344 nas-doc_1.9.2-4squeeze1_all.deb
 201130b7b5ddcd551549cfb9cd454b0fd6e2a3f2 120326 nas_1.9.2-4squeeze1_amd64.deb
 55481a179e3bebe5ab87521df67c6c2d5b8468b7 548620 nas-bin_1.9.2-4squeeze1_amd64.deb
 f964bed0dcef1251acf09e1614e7348c411b7271 84686 libaudio2_1.9.2-4squeeze1_amd64.deb
 883db3f5e6fe5ed09544bc62f458b8e98efd80d8 537650 libaudio-dev_1.9.2-4squeeze1_amd64.deb
Checksums-Sha256: 
 9f1264bab8538f2f5f3fc0309030c8d3a8418c4def06d8ee11422318d67a2c36 1755 nas_1.9.2-4squeeze1.dsc
 722d4f567f61e89e735277a0c1d3cfed98842160e3349bf956b1db525eacd2d3 1484369 nas_1.9.2.orig.tar.gz
 780d4ae15b496035f7d3bd99e1fac22bdd5a5944bbf938a1e23a5733b3ae29fe 43710 nas_1.9.2-4squeeze1.diff.gz
 363990b70adfa508aa8ec9d8e62a320ffdd9de9248600b35de47428a8a17e11b 158344 nas-doc_1.9.2-4squeeze1_all.deb
 778b360bf4c3189dfa220a856997ab73751ada8c40a8bcddc22b74f6e70c91e4 120326 nas_1.9.2-4squeeze1_amd64.deb
 fef5082fe448da8a961b6657f531946d050dd4c92be8e5a75faae4c0ec29f350 548620 nas-bin_1.9.2-4squeeze1_amd64.deb
 023858e855d171860827d39a966d96c56e64f960aab6dc64ab2152bbcb22a213 84686 libaudio2_1.9.2-4squeeze1_amd64.deb
 937a66c24547d9b122de3936cb7ca39f9c8906bcbfc5c5a5b30dfc77d20e99bb 537650 libaudio-dev_1.9.2-4squeeze1_amd64.deb
Files: 
 a6fbe3ca975447e36e1b6e014e18a25c 1755 sound optional nas_1.9.2-4squeeze1.dsc
 ed7864f55b384452167959022cfb403b 1484369 sound optional nas_1.9.2.orig.tar.gz
 cf9841f2419d4b853757ca8d6af75686 43710 sound optional nas_1.9.2-4squeeze1.diff.gz
 5b1572ec20dc8246d4151330ae5f57c7 158344 doc extra nas-doc_1.9.2-4squeeze1_all.deb
 87e6ce802c880f9353e4ae18d0926304 120326 sound optional nas_1.9.2-4squeeze1_amd64.deb
 66fb8d8061e8845b7e1cc1850e691046 548620 sound extra nas-bin_1.9.2-4squeeze1_amd64.deb
 71ed172a6986380bec965bd4a104642a 84686 libs optional libaudio2_1.9.2-4squeeze1_amd64.deb
 990ccae9e8345362858222c99104520c 537650 libdevel optional libaudio-dev_1.9.2-4squeeze1_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=SlJg
-----END PGP SIGNATURE-----

Send a report that this bug log contains spam.