PT-2004-2359 · Tenable · Nessus

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-1445

Positive Technologies (AI Summary)

CVSS v2.0

3.7

Baixa

Vetor base

AV:L/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Nessus versions 2.0.11 and earlier

Description: A race condition issue exists in the nessus-adduser component of Nessus. This issue can be exploited by local users to gain privileges if the TMPDIR environment variable is not set.

Recommendations: For Nessus versions 2.0.11 and earlier, set the TMPDIR environment variable to prevent exploitation of the race condition issue.

Correção

Identificadores relacionados

CVE-2004-1445

Produtos afetados

Nessus

Referências · 6

• http://secunia.com/advisories/12127 · Correção
• http://securityfocus.com/bid/10784 · Correção
• http://gentoo.org/security/en/glsa/glsa-200408-11.xml · Correção, Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16768 · Nota
• http://nessus.org/nessus_2_0.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1445 · Nota de Segurança