CVE-2003-0372

Severity: medium (CVSS 4.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-06-16 · updated 2026-06-16
Weakness: CWE-189

Description

Signed integer vulnerability in libnasl in Nessus before 2.0.6 allows local users with plugin upload privileges to cause a denial of service (core dump) and possibly execute arbitrary code by causing a negative argument to be provided to the insstr function as used in a NASL script.

Affected products

Nessus: through 2.0.5

References

http://marc.info/?l=bugtraq&m=105364059803427&w=2
http://marc.info/?l=bugtraq&m=105369506714849&w=2
http://www.securityfocus.com/bid/7664
http://marc.info/?l=bugtraq&m=105364059803427&w=2
http://marc.info/?l=bugtraq&m=105369506714849&w=2
http://www.securityfocus.com/bid/7664

Get alerted when CVE-2003-0372 or the next vulnerability affects your stack