CVE-2004-1445

2005-02-1305:00:00

[email protected]

web.nvd.nist.gov

security

nessus

race condition

cve-2004-1445

vulnerability

3.7 Low

CVSS2

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:N/C:P/I:P/A:P

6.5 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows local users to gain privileges.

Affected configurations

NVD

Node

nessusnessusMatch2.0

nessusnessusMatch2.0.1

nessusnessusMatch2.0.2

nessusnessusMatch2.0.3

nessusnessusMatch2.0.4

nessusnessusMatch2.0.5

nessusnessusMatch2.0.6

nessusnessusMatch2.0.7

nessusnessusMatch2.0.8

nessusnessusMatch2.0.9

nessusnessusMatch2.0.10

nessusnessusMatch2.0.11

nessusnessusMatch2.1.0

CPENameOperatorVersion
nessus:nessusnessuseq2.0
nessus:nessusnessuseq2.0.1
nessus:nessusnessuseq2.0.2
nessus:nessusnessuseq2.0.3
nessus:nessusnessuseq2.0.4
nessus:nessusnessuseq2.0.5
nessus:nessusnessuseq2.0.6
nessus:nessusnessuseq2.0.7
nessus:nessusnessuseq2.0.8
nessus:nessusnessuseq2.0.9

CPE	Name	Operator	Version
nessus:nessus	nessus	eq	2.0
nessus:nessus	nessus	eq	2.0.1
nessus:nessus	nessus	eq	2.0.2
nessus:nessus	nessus	eq	2.0.3
nessus:nessus	nessus	eq	2.0.4
nessus:nessus	nessus	eq	2.0.5
nessus:nessus	nessus	eq	2.0.6
nessus:nessus	nessus	eq	2.0.7
nessus:nessus	nessus	eq	2.0.8
nessus:nessus	nessus	eq	2.0.9