Mailing List Archive

Nessus 1.3.1 is out
I'm pleased to announce the availability of Nessus 1.3.1 (experimental).

Nessus 1.3.1 is an experimental release, which means that you may expect it
to crash, produce incomplete reports, wipe out your disk and eat your
children. So please use it with care. Note that the whole 1.3.x series will
be considered as being unstable.


. changes by Renaud Deraison (deraison@cvs.nessus.org)

- Rewrote the plugins scheduler (which determines the order in which

the plugins are to be launched). The new one is much more efficient
but as a result, it is not possible to accurately determine the
order in which the plugins will be ran, so the 'plugin name' in
the client is now totally bogus

- Fixed various issues with NASL scripts so that they work better

with NASL2

- Fixed bugs relative to the creation of icmp and udp packets in nasl


- Fixed some fatal bugs in the bpf sharer


- NASL scripts do not read /dev/urandom any more, and use time() as a

random seed instead. As a result, the loading and execution of nasl
scripts if faster on systems where /dev/urandom can be blocking

- Fixed the tcp NIDS evasion techniques on BSD systems


- Full support for Bugtraq IDs


- The HTML reports add links for URLs, and show the ID number of

the plugin that issues the report.

- Speed up the calls to arg_get_value() by using a hash of the name

being searched for.

- Changed the licence of NASL2 to the GPLv2 (with the consent of Michel Arboi)


. changes by Michel Arboi (arboi@noos.fr)

- Better handling of the arrays in NASL2


. changes by Erik Anderson (eanders@carmichaelsecurity.com)

- CVE and bugtraq cross references


. changes by Jay (jay@kinetic.org)

- Fixed multiple typos in the plugins


. changes by Javier Fernandez-Sanguino (jfernandez@germinus.com)

- Nessus now ships Hydra 2.2

- Fixed various compilation scritps (see bug#63)