Nate:
I can see the problem but,in the tests I've done, nessus doesn't crash and it works
well.
This problem seems to be related with two plugins: citrix.nasl and sql_injection.nasl
Both of them define:
script_cve_id("");
When xml_output_ng.c process this plugins (function xml_fprintf_element() ), it
generates "<cve_id></cve_id>" in the XML document but it also writes to stderr:
if (strlen(value)==0) {
fprintf( stderr, "tag=\"%s\" value == \"\"", tag );
fprintf (fd, "<%s></%s>\n", tag, tag);
return;
}
I think we could delete the stderr output to avoid this problem.
Renaud, Axel, what do you think?
Regards,
Rodolfo Baader
[EMAIL PROTECTED]
-
[EMAIL PROTECTED]: general discussions about Nessus.
* To unsubscribe, send a mail to [EMAIL PROTECTED] with
"unsubscribe nessus" in the body.