medium4.6Public exploit code
CVE-2003-0372
Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service (core dump) and po…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Nessus 2.0.x - LibNASL Arbitrary Code Execution2003-05-22 · dos · multiple · Verified
Impact
Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code by causing a negative argument to be provided to the insstr function as used in a NASL script.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nessus | Nessus | through 2.0.5 |