CVE-2003-0372 Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code by causing....
MediumCVSS 4.6
EPSS 0.89%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code by causing a negative argument to be provided to the insstr function as used in a NASL script.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nessus | <= 2.0.5 | No fix listed |
References
- 20030522 Potential security vulnerability in Nessus mailing-list
- 20030523 nessus NASL scripting engine security issues mailing-list
- 7664 vdb-entry