VULNERABILITY INTELLIGENCE
CVE-2003-0373
CVSS score4.4 MEDIUM
EPSS probability0.43%
CISA KEVNot currently listed
Published2003-06-16
Last modified2026-06-16
CVSS vectorAV:L/AC:M/Au:N/C:P/I:P/A:P
Description
Multiple buffer overflows in libnasl in Nessus before 2.0.6 allow local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code via (1) a long proto argument to the scanner_add_port function, (2) a long user argument to the ftp_log_in function, (3) a long pass argument to the ftp_log_in function.
Weakness classification
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer