PT-2004-2359 · Tenable · Nessus

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-1445

Positive Technologies (AI Summary)

CVSS v2.0

3.7

Low

Base vector

AV:L/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Nessus versions 2.0.11 and earlier

Description: A race condition issue exists in the nessus-adduser component of Nessus. This issue can be exploited by local users to gain privileges if the TMPDIR environment variable is not set.

Recommendations: For Nessus versions 2.0.11 and earlier, set the TMPDIR environment variable to prevent exploitation of the race condition issue.

Fix

Related Identifiers

CVE-2004-1445

Affected Products

Nessus

References · 6

• http://secunia.com/advisories/12127 · Patch
• http://securityfocus.com/bid/10784 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2004-1445 · Security Note
• http://gentoo.org/security/en/glsa/glsa-200408-11.xml · Patch, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16768 · Note
• http://nessus.org/nessus_2_0.html · Note