Mailing List Archive

Nessus & Redhat 8.0
I suspect that Redhat 8.0 includes a buggy version of the regex
library (glibc-2.2.93-5)
I got a SEGV and Valgrind says it reads uninitialized memory.
It does not happen if you force Nessus to use its own version of the
regex library

--
mailto:arboi@bigfoot.com
GPG Public keys: http://michel.arboi.free.fr/pubkey.txt
http://michel.arboi.free.fr/ http://arboi.da.ru/
FAQNOPI de fr.comp.securite : http://faqnopi.da.ru/
Re: Nessus & Redhat 8.0 [ In reply to ]
Joe Francis <joe@krazykarl.com> writes:

> FWIW, I've been running nessus on redhat 8 for quite some time without
> issues. In fact, it might even be a bit more stable than it was on 7.3,
> although that may be attributed to upgrading our nessus installation at
> the same time.

Well, try the current CVS version and the NASL interpretor will dump a
core on webmirror.nasl
I looked at it with valgrind: the problem is in the regex library.

You can fix this by enabling Nessus internal regex library.