Mailing List Archive

possible bo in utils.c
Hello,

I use rats, i think you know what it is, for finding some vulnerability, as
good script kiddie :), in nessusd and it tell me that there is
a possible bo in utils.c at 312 line.
I try to find if it a possible bo and i think yes because 'value' a field of
arglist struct
is a pointer to void and there is no control on it.

I hope this can help the project, if no

thanks and sorry.

By

-- Jonny



_________________________________________________________________
The new MSN 8: advanced junk mail protection and 2 months FREE*
http://join.msn.com/?page=features/junkmail
Re: possible bo in utils.c [ In reply to ]
On Mon, Apr 07, 2003 at 10:53:46PM +0200, Jonny Stone wrote:
> Hello,
>
> I use rats, i think you know what it is, for finding some vulnerability, as
> good script kiddie :), in nessusd and it tell me that there is
> a possible bo in utils.c at 312 line.

Nope. read the five lines above : the length of hosts->value is computed
and allocated.


-- Renaud