CVE-2007-1543
Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network...
Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection.
- Record
CVE-2007-1543- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection.
- Record
CVE-2007-1543- Updated
- 2026-11-02
EUVDEUVD-2007-1537 No score
Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection.
- Record
EUVD-2007-1537- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-h8rc-m7qp-g98c No score
Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network...
Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection.
- Record
GHSA-h8rc-m7qp-g98c- Updated
- 2026-11-02
OSV No score
Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection.
- Record
CVE-2007-1543- Updated
- 2026-11-02
OSVDEBIAN-CVE-2007-1543 No score
Stack-based buffer overflow in the accept_att_local function in server/os/connection.c in Network Audio System (NAS) before 1.8a SVN 237 allows remote attackers to execute arbitrary code via a long path slave name in a USL socket connection.
- Record
DEBIAN-CVE-2007-1543- Updated
- 2026-11-02
Affected products
Affected packages
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| aliases | ||
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-1543 is a high vulnerability (CVSS 10.0) in Radscan Network Audio System, published March 20, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.07%, the 94th percentile. Fixed in nas 1.8-4.
References
mandriva.com/security/advisories?name=MDKSA-2007:065
securitytracker.com/id?1017822
secunia.com/advisories/24980
securityfocus.com/bid/23017
exchange.xforce.ibmcloud.com/vulnerabilities/33047
Show 15 moreShow less
ubuntu.com/usn/usn-446-1
security.gentoo.org/glsa/glsa-200704-20.xml
vupen.com/english/advisories/2007/0997
aluigi.altervista.org/adv/nasbugs-adv.txt
issues.rpath.com/browse/RPL-1155
debian.org/security/2007/dsa-1273
radscan.com/nas/HISTORY
nvd.nist.gov/vuln/detail/CVE-2007-1543
github.com/advisories/GHSA-h8rc-m7qp-g98c
security-tracker.debian.org/tracker/CVE-2007-1543