Vulnerabilities > CVE-2003-0372 - Numeric Errors vulnerability in Nessus
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code by causing a negative argument to be provided to the insstr function as used in a NASL script.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
Common Weakness Enumeration (CWE)
Exploit-Db
| description | Nessus 2.0.x LibNASL Arbitrary Code Execution Vulnerability. CVE-2003-0372. Dos exploits for multiple platform |
| id | EDB-ID:22634 |
| last seen | 2016-02-02 |
| modified | 2003-05-22 |
| published | 2003-05-22 |
| reporter | Sir Mordred |
| source | https://www.exploit-db.com/download/22634/ |
| title | Nessus 2.0.x LibNASL Arbitrary Code Execution Vulnerability |