CVE

Id
18197  
CVE No.
CVE-2006-2093  
Status
Candidate  
Description
Nessus before 2.2.8, and 3.x before 3.0.3, allows user-assisted attackers to cause a denial of service (memory consumption) via a NASL script that calls split with an invalid sep parameter. NOTE: a design goal of the NASL language is to facilitate sharing of security tests by guaranteeing that a script "can not do anything nasty." This issue is appropriate for CVE only if Nessus users have an expectation that a split statement will not use excessive memory.  
Phase
Assigned (20060428)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
156943 18197 CVE-2006-2093 BUGTRAQ:20060425 NASL "Split" function Buffer overflow Vulnerability  View
156944 18197 CVE-2006-2093 URL:http://www.securityfocus.com/archive/1/archive/1/431987/100/0/threaded  View
156945 18197 CVE-2006-2093 BUGTRAQ:20060425 Re: NASL "Split" function Buffer overflow Vulnerability  View
156946 18197 CVE-2006-2093 URL:http://www.securityfocus.com/archive/1/archive/1/431993/100/0/threaded  View
156947 18197 CVE-2006-2093 BUGTRAQ:20060425 Re: NASL "Split" function Buffer overflow Vulnerability  View
156948 18197 CVE-2006-2093 URL:http://www.securityfocus.com/archive/1/archive/1/431994/100/0/threaded  View
156949 18197 CVE-2006-2093 UBUNTU:USN-279-1  View
156950 18197 CVE-2006-2093 URL:http://www.ubuntulinux.org/support/documentation/usn/usn-279-1  View
156951 18197 CVE-2006-2093 VUPEN:ADV-2006-1541  View
156952 18197 CVE-2006-2093 URL:http://www.vupen.com/english/advisories/2006/1541  View
156953 18197 CVE-2006-2093 OSVDB:25084  View
156954 18197 CVE-2006-2093 URL:http://www.osvdb.org/25084  View
156955 18197 CVE-2006-2093 SECTRACK:1015996  View
156956 18197 CVE-2006-2093 URL:http://securitytracker.com/id?1015996  View
156957 18197 CVE-2006-2093 SREASON:817  View
156958 18197 CVE-2006-2093 URL:http://securityreason.com/securityalert/817  View
156959 18197 CVE-2006-2093 XF:nessus-nasl-split-dos(26034)  View

Related JVN