Home page logo
/

bugtraq logo Bugtraq mailing list archives

Re: NASL 'Split' function Buffer overflow Vulnerability
From: Renaud Deraison <deraison () nessus org>
Date: Tue, 25 Apr 2006 13:20:36 -0400


On Apr 25, 2006, at 1:09 PM, Renaud Deraison wrote:


On Apr 25, 2006, at 3:51 AM, OS2A BTO wrote:

We have discovered a vulnerability in libnasl of Nessus which can
cause Denial of
Service. We have attached the advisory which details the vulnerability and
also has the fix. A patch for libnasl 2.2.4 is included.


At the opposite of what the full advisory hints, this issue is NOT exploitable.

I meant to say : "not exploitable to execute arbitary code".


                                -- Renaud


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault