QwikSec

Security Database

CVE

CWE

Training

CVE-2003-0373

Published: Jun 6, 2003

Modified: Aug 8, 2024

PUBLISHED

Description

Multiple buffer overflows in libnasl in Nessus before 2.0.6 allow local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code via (1) a long proto argument to the scanner_add_port function, (2) a long user argument to the ftp_log_in function, (3) a long pass argument to the ftp_log_in function.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20030522 Potential security vulnerability in Nessus

mailing-list

x_refsource_BUGTRAQ

20030523 nessus NASL scripting engine security issues

mailing-list

x_refsource_BUGTRAQ

vdb-entry

x_refsource_BID

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.