PT-2014-4916

CVE-2014-2848

·

Published

2014-04-11

·

Updated

2014-04-14

Description by

CVSS 2.0
6.9
Medium
MetricsAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Nessus version 5.2.1
Description A race condition exists in the wmi malware scan.nbin plugin, allowing local users to gain privileges. This is achieved by replacing the dissolvable agent executable in the Windows temp directory with a malicious program.
Recommendations For Nessus version 5.2.1, update the wmi malware scan.nbin plugin to a version after 201402262215 to resolve the issue.
Exploitability
Fix
Impacts
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾