Tenable · Nessus · CVE-2003-0373
Name of the Vulnerable Software and Affected Versions:
Nessus versions prior to 2.0.6
Description:
The issue is related to multiple buffer overflows in the libnasl component. These overflows can be triggered by local users with plugin upload privileges, potentially leading to a denial of service (core dump) and possibly the execution of arbitrary code. This can occur through various means, including a long `proto` argument to the `scanner add port` function, a long `user` argument to the `ftp log in` function, or a long `pass` argument to the `ftp log in` function.
Recommendations:
For Nessus versions prior to 2.0.6, update to version 2.0.6 or later to resolve the issue.