Vulnerabilities > Radscan > Network Audio System > 1.8a

DATE CVE VULNERABILITY TITLE RISK
2007-03-20 CVE-2007-1547 Local Privilege Escalation and Denial of Service vulnerability in Radscan Network Audio System 1.8A
The ReadRequestFromClient function in server/os/io.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (crash) via multiple simultaneous connections, which triggers a NULL pointer dereference.
network
low complexity
mandrakesoft radscan
7.8
2007-03-20 CVE-2007-1546 Local Privilege Escalation and Denial of Service vulnerability in Radscan Network Audio System 1.8A
Array index error in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (crash) via (1) large num_action values in the ProcAuSetElements function in server/dia/audispatch.c or (2) a large inputNum parameter to the compileInputs function in server/dia/auutil.c.
network
low complexity
mandrakesoft radscan
5.0
2007-03-20 CVE-2007-1545 Local Privilege Escalation and Denial of Service vulnerability in Radscan Network Audio System 1.8A
The AddResource function in server/dia/resource.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (server crash) via a nonexistent client ID.
network
low complexity
mandrakesoft radscan
5.0
2007-03-20 CVE-2007-1544 Local Privilege Escalation and Denial of Service vulnerability in Radscan Network Audio System 1.8A
Integer overflow in the ProcAuWriteElement function in server/dia/audispatch.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a large max_samples value.
network
low complexity
mandrakesoft radscan
5.0
2007-03-20 CVE-2007-1543 Local Privilege Escalation and Denial of Service vulnerability in Radscan Network Audio System 1.8A
Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection.
network
low complexity
mandrakesoft radscan
critical
10.0