USN-279-1: libnasl/nessus vulnerability

Jayesh KS discovered that the naslsplit function in the NASL Nessus Attack Scripting Language library did not check for a zero-length separator argument, which lead to an invalid memory allocation. This library is primarily used in the Nessus security scanner; a remote attacker could exploit this...

A Nessus Daemon is running

The port TCP:3001 or TCP:1241 is open, and since this is the default port for the Nessus daemon, this usually indicates a Nessus daemon is running, and open for the outside world. An attacker can use the Nessus Daemon to scan other site, or to further compromise the internal network on which...