CVE-2014-2848 | BDVDB-2026-60870 Detail

Description#

A race condition in the wmi_malware_scan.nbin plugin before 201402262215 for Nessus 5.2.1 allows local users to gain privileges by replacing the dissolvable agent executable in the Windows temp directory with a Trojan horse program.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.nccgroup.com/en/learning-and-research-centre/technical-advisories/nessus-authenticated-scan-local-privilege-escalation/
http://www.securitytracker.com/id/1029946
https://discussions.nessus.org/thread/7195
http://secunia.com/advisories/57403

Exploit#

No public exploit known

History#

Version 12014-04-11Record published in the CVE List.
Version 22024-09-17Most recent update recorded in the CVE List.