Solaris 9 (sparc) : 117201-09

X11 6.6.1: st patch. Date this patch was last updated by Sun : Feb/23/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid23531;...

Solaris 9 (x86) : 115615-28

Sun JavaTM System Directory Server 5.2 patch 6 : Solarisx86. Date this patch was last updated by Sun : Sep/21/07 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc';...

Solaris 9 (sparc) : 113801-12

Sun Cluster 3.1: Core/Sys Admin Patch. Date this patch was last updated by Sun : May/20/04 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 9 (sparc) : 117949-43

Sun Cluster 3.1: Core Patch for Solaris 9. Date this patch was last updated by Sun : Dec/08/11 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

USN-279-1: libnasl/nessus vulnerability

Jayesh KS discovered that the naslsplit function in the NASL Nessus Attack Scripting Language library did not check for a zero-length separator argument, which lead to an invalid memory allocation. This library is primarily used in the Nessus security scanner; a remote attacker could exploit this...

CVE-2006-2093

Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of service memory consumption via a NASL script that calls split with an invalid sep parameter. NOTE: a design goal of the NASL language is to facilitate sharing of security tests by guaranteeing that a...

Design/Logic Flaw

Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of service memory consumption via a NASL script that calls split with an invalid sep parameter. NOTE: a design goal of the NASL language is to facilitate sharing of security tests by guaranteeing that a...

CVE-2006-2093

Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of service memory consumption via a NASL script that calls split with an invalid sep parameter. NOTE: a design goal of the NASL language is to facilitate sharing of security tests by guaranteeing that a...

CVE-2006-2093

Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of service memory consumption via a NASL script that calls split with an invalid sep parameter. NOTE: a design goal of the NASL language is to facilitate sharing of security tests by guaranteeing that a...

CVE-2006-2093

CVE-2006-2093 affects Nessus/NASL through the libnasl library: a NASL script calling split with a zero/invalid separator can trigger excessive memory allocation, enabling user‑assisted denial of service that may crash the Nessus daemon. Public sources in connected documents confirm the issue aris...

Nessus buffer overflow

Buffer overflow on parsing NASL Nessus Attack Scripting Language scripts...

NASL 'Split' function Buffer overflow Vulnerability

NASL Split function Buffer Overflow Vulnerability OS2A ID: OS2A1005 Status: 20/04/2006 Issue Discovered 21/04/2006 Fixed 25/04/2006 Advisory Released Class: Buffer Overflow Severity: Medium Overview: ------------- Nessus is a popular remote vulnerability scanner with a plugin architecture, each...

Global variable settings

This plugin configures miscellaneous global variables for NASL scripts. It does not perform any security check but may disable or change the behaviour of others. SPDX-FileCopyrightText: 2005 Michel Arboi SPDX-FileCopyrightText: New code / functionality since 2009 Greenbone AG Some text descriptio...

Nikto (NASL wrapper)

This VT is deprecated. Copyright C 2005 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under th...

Solaris 8 (x86) : 109932-10

CDE 1.4x86: sdtimage Patch. Date this patch was last updated by Sun : Mar/24/05 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Hydra (NASL wrappers options)

This plugin sets options for the Hydra tests. Hydra finds passwords by brute force. To use the Hydra plugins, enter the 'Logins file' and the 'Passwords file under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...

Nikto (NASL wrapper)

This plugin runs Nikto2, an open source GPL web server scanner used to perform comprehensive tests for multiple issues, such as outdated server versions, potentially dangerous files or programs, version specific problems, various configuration items, etc. See the section 'plugins options' to...

nessus NASL scripting engine security issues

// @Security advisory: Nessus NASL scripting engine security issues Release date: May 23, 2003 Name: Nessus NASL scripting engine security issues Author: Sir Mordred [email protected] I. DESCRIPTION The "Nessus" Project aims to provide to the internet community a free, powerful, up-to-date and...

Multiple Nessus bugs

Buffer overflows and integer overflow in nasl...

Nessus 2.0.x - LibNASL Arbitrary Code Execution

source: https://www.securityfocus.com/bid/7664/info Nessus has reported that various flaws have been discovered in the 'libnasl' library used by the Nessus application. As a result, a malicious NASL script may be able to break outside of the established sandbox environment and execute arbitrary...