Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
5
CVSSv2

CVE-2007-1544

Published: 20/03/2007 Updated: 16/10/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Subscribe to Mandrake Linux

Vulnerability Summary

Integer overflow in the ProcAuWriteElement function in server/dia/audispatch.c in Network Audio System (NAS) prior to 1.8a SVN 237 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a large max_samples value.

Vulnerable Product Search on Vulmon Subscribe to Product

radscan network_audio_system 1.8a

Vendor Advisories

Debian CVElist Bug Report Logs: Several NAS security bugs
Debian Bug report logs - #416038 Several NAS security bugs Package: nas; Maintainer for nas is Steve McIntyre <93sam@debianorg>; Source for nas is src:nas (PTS, buildd, popcon) Reported by: Florian Weimer <fw@denebenyode> Date: Sat, 24 Mar 2007 10:09:01 UTC Severity: grave Tags: security Fixed in version nas/18 ...
Ubuntu Security Notice: nas vulnerabilities
Luigi Auriemma discovered multiple flaws in the Network Audio System server Remote attackers could send specially crafted network requests that could lead to a denial of service or execution of arbitrary code Note that default Ubuntu installs do not include the NAS server ...

References

NVD-CWE-Otherhttp://aluigi.altervista.org/adv/nasbugs-adv.txthttp://www.securityfocus.com/bid/23017http://secunia.com/advisories/24527http://www.debian.org/security/2007/dsa-1273http://www.mandriva.com/security/advisories?name=MDKSA-2007:065http://www.ubuntu.com/usn/usn-446-1http://secunia.com/advisories/24601http://secunia.com/advisories/24628http://secunia.com/advisories/24638http://www.radscan.com/nas/HISTORYhttp://www.securitytracker.com/id?1017822http://security.gentoo.org/glsa/glsa-200704-20.xmlhttp://secunia.com/advisories/24980http://www.vupen.com/english/advisories/2007/0997https://exchange.xforce.ibmcloud.com/vulnerabilities/33051http://www.securityfocus.com/archive/1/464606/30/7230/threadedhttps://bugs.debian.org/cgi-bin/bugreport.cgi?bug=416038https://usn.ubuntu.com/446-1/https://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook