Hi,

since we have added passwords in the list of passwords test
by default_ssh_credentials.nasl,
we discovered a bug with the use of this plugin

in our case,  it fills the 1024 entries of the connections
<http://www.openvas.org/src-doc/openvas-libraries/network_8c.html#ae55ea99bd41cc211178713a772eec911>
table
 declare in misc/network.c file
causing message : Out of OpenVAS file descriptors  and the end of the plugin

We trace and see that  get_connection_fd
<http://www.openvas.org/src-doc/openvas-libraries/network_8c.html#a60d890556d36658fa0975152d173e6c3>
is called by open_stream_connection_ext
<http://www.openvas.org/src-doc/openvas-libraries/network_8c.html#a6d21fa2853fe8b14d6821c001b030c70>
to fills the connections
<http://www.openvas.org/src-doc/openvas-libraries/network_8c.html#ae55ea99bd41cc211178713a772eec911>table


We check value in the table and see it contains 1024 time the pid 15703,
the one of the plugin :

 2011/default_ssh_credentials.nasl (process 15703) finished its job in
2189.020 seconds

and at the end the most important, we see the release_connection_fd
<http://www.openvas.org/src-doc/openvas-libraries/network_8c.html#a1677987a511fd08baa9198d91e4565c2>
 fonction
is never called :-( for this specific plugin .

Can you help to fix ?
we don't know if  problems come from the library or from the plugin

-- 
Sebastien Aucouturier , R&D Manager and Senior Technologist,

<http://secludit.com/>
Amazon WS Solutions Provider :
http://www.aws-partner-directory.com/PartnerDirectory/PartnerDetail?Name=SecludIT
HP Cloud Security Partner :
https://marketplace.hpcloud.com/secludit-elastic-detector

Agence Toulouse
GSM: 06.20.60.77.24
_______________________________________________
Openvas-plugins mailing list
[email protected]
https://lists.wald.intevation.org/cgi-bin/mailman/listinfo/openvas-plugins

Reply via email to