PT-2014-4916
CVE-2014-2848
·
Published
2014-04-11
·
Updated
2014-04-14
Description by
CVSS 2.0
6.9
MediumMetricsAV:L/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Nessus version 5.2.1
Description
A race condition exists in the wmi malware scan.nbin plugin, allowing local users to gain privileges. This is achieved by replacing the dissolvable agent executable in the Windows temp directory with a malicious program.
Recommendations
For Nessus version 5.2.1, update the wmi malware scan.nbin plugin to a version after 201402262215 to resolve the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾