CVE-2004-1445 A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows local users to gain privileges.
LowCVSS 3.7
EPSS 0.31%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows local users to gain privileges.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nessus | = 2.0 | No fix listed |
| nessus | = 2.0.1 | No fix listed |
| nessus | = 2.0.2 | No fix listed |
| nessus | = 2.0.3 | No fix listed |
| nessus | = 2.0.4 | No fix listed |
| nessus | = 2.0.5 | No fix listed |
| nessus | = 2.0.6 | No fix listed |
| nessus | = 2.0.7 | No fix listed |
| nessus | = 2.0.8 | No fix listed |
| nessus | = 2.0.9 | No fix listed |
| nessus | = 2.0.10 | No fix listed |
| nessus | = 2.0.11 | No fix listed |
| nessus | = 2.1.0 | No fix listed |
References
- 12127 patch third-party-advisory
- GLSA-200408-11 patch vendor-advisory
- www.nessus.org
- 10784 patch vdb-entry
- nessus-adduser-race-condition(16768) vdb-entry