Home page logo

bugtraq logo Bugtraq mailing list archives

Re: NASL 'Split' function Buffer overflow Vulnerability
From: Renaud Deraison <deraison () nessus org>
Date: Tue, 25 Apr 2006 13:20:36 -0400

On Apr 25, 2006, at 1:09 PM, Renaud Deraison wrote:

On Apr 25, 2006, at 3:51 AM, OS2A BTO wrote:

We have discovered a vulnerability in libnasl of Nessus which can
cause Denial of
Service. We have attached the advisory which details the vulnerability and
also has the fix. A patch for libnasl 2.2.4 is included.

At the opposite of what the full advisory hints, this issue is NOT exploitable.

I meant to say : "not exploitable to execute arbitary code".

                                -- Renaud

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]