CVE-2014-2848: Race Condition
A race condition in the wmimalwarescan.nbin plugin before 201402262215 for Nessus 5.2.1 allows local users to gain privileges by replacing the dissolvable agent executable in the Windows temp directory with a Trojan horse program.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-2848?
CVE-2014-2848 has a moderate severity rating due to the potential for local privilege escalation.
How do I fix CVE-2014-2848?
To fix CVE-2014-2848, update to Nessus version 5.2.2 or later, which addresses the vulnerability.
Who is affected by CVE-2014-2848?
Local users on systems running Nessus versions prior to 5.2.2, particularly 5.2.1 and certain plugin-sets, are affected by CVE-2014-2848.
What type of vulnerability is CVE-2014-2848?
CVE-2014-2848 is a race condition vulnerability that allows privilege escalation by replacing executable agents.
What is the impact of exploiting CVE-2014-2848?
Exploiting CVE-2014-2848 could allow local users to gain elevated privileges and execute arbitrary code on the system.