CVE-2014-2848 A race condition in the wmi_malware_scan.nbin plugin before 201402262215 for Nessus 5.2.1 allows local users to gain privileges by replacing the dissolvable agent executable in the Windows temp direct...
MediumCVSS 6.9
EPSS 0.24%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A race condition in the wmi_malware_scan.nbin plugin before 201402262215 for Nessus 5.2.1 allows local users to gain privileges by replacing the dissolvable agent executable in the Windows temp directory with a Trojan horse program.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tenable Nessus | = 5.2.1 | No fix listed |
| tenable plugin-set | <= 201402092115 | No fix listed |
References
- 57403 third-party-advisory vendor-advisory
- 1029946 vdb-entry
- discussions.nessus.org vendor-advisory
- www.nccgroup.com