Nessus NASL scripting engine security issues [LWN.net]

Package(s):

nessus

CVE #(s):

Created:

May 27, 2003

Updated:

August 12, 2004

Description:

Some some vulnerabilities exsist in the Nessus NASL scripting engine. To exploit these flaws, an attacker would need to have a valid Nessus account as well as the ability to upload arbitrary Nessus plugins in the Nessus server (this option is disabled by default) or he/she would need to trick a user somehow into running a specially crafted nasl script. Read the full advisory for additional information.

Alerts:

Gentoo

200305-10

2003-05-27

(Log in to post comments)