CVE-2013-4258
Published: 9 October 2013
Format string vulnerability in the osLogMsg function in server/os/aulog.c in Network Audio System (NAS) 1.9.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in unspecified vectors, related to syslog.
Notes
| Author | Note |
|---|---|
| mdeslaur | this got fixed in debian/ubuntu 1.9.3-2 |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
nas Launchpad, Ubuntu, Debian |
lucid |
Ignored
(end of life)
|
| precise |
Not vulnerable
|
|
| quantal |
Not vulnerable
|
|
| raring |
Not vulnerable
|
|
| upstream |
Needed
|
|
|
Patches: upstream: http://sourceforge.net/p/nas/code/285 |
||