Nate:

I can see the problem but,in the tests I've done, nessus doesn't crash and it works 
well.
This problem seems to be related with two plugins: citrix.nasl and sql_injection.nasl
Both of them define:

script_cve_id("");

When xml_output_ng.c process this plugins (function xml_fprintf_element() ), it 
generates "<cve_id></cve_id>" in the XML document but it also writes to stderr:

 if (strlen(value)==0) {
    fprintf( stderr, "tag=\"%s\" value == \"\"", tag );
    fprintf (fd, "<%s></%s>\n", tag, tag);
    return;
 }

I think we could delete the stderr output to avoid this problem.
Renaud, Axel, what do you think?

Regards,

Rodolfo Baader
[EMAIL PROTECTED]




-
[EMAIL PROTECTED]: general discussions about Nessus.
* To unsubscribe, send a mail to [EMAIL PROTECTED] with
"unsubscribe nessus" in the body.

Reply via email to