CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2003-0373
https://notcve.org/view.php?id=CVE-2003-0373
06 Jun 2003 — Multiple buffer overflows in libnasl in Nessus before 2.0.6 allow local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code via (1) a long proto argument to the scanner_add_port function, (2) a long user argument to the ftp_log_in function, (3) a long pass argument to the ftp_log_in function. Múltiples desbordamientos de búfer en Nessus anterior a la 2.0.6 permiten que usuarios locales con privilegios de carga de plugin provoquen una denegación de... • http://marc.info/?l=bugtraq&m=105364059803427&w=2 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2003-0374
https://notcve.org/view.php?id=CVE-2003-0374
06 Jun 2003 — Multiple unknown vulnerabilities in Nessus before 2.0.6, in libnessus and possibly libnasl, a different set of vulnerabilities than those identified by CVE-2003-0372 and CVE-2003-0373, aka "similar issues in other nasl functions as well as in libnessus." Múltiples vulnerabilidades desconocidas en Nessus anterior a la 2.0.6, en libnessus y posiblemente libnsl (un conjunto diferente de las señaladas en CAN-2003-0372 y CAN-2003-0373). • http://marc.info/?l=bugtraq&m=105364059803427&w=2 •
CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1CVE-2003-0372 – Nessus 2.0.x - LibNASL Arbitrary Code Execution
https://notcve.org/view.php?id=CVE-2003-0372
06 Jun 2003 — Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code by causing a negative argument to be provided to the insstr function as used in a NASL script. Vulnerabilidad de entero con signo en libnsl en Nessus anterior a la 2.0.6 permite que usuarios locales con privilegios de carga de plugin provoquen una denegación de servicio (core dump) y posiblemente ejecuten código arbitrari... • https://www.exploit-db.com/exploits/22634 • CWE-189: Numeric Errors •