104 matches found
CVE-2004-1445: Undefined Security Weakness
A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows local users to gain privileges...
GLSA-200408-11 : Nessus: 'adduser' race condition vulnerability
The remote host is affected by the vulnerability described in GLSA-200408-11 Nessus: 'adduser' race condition vulnerability A race condition can occur in 'nessus-adduser' if the user has not configured their TMPDIR variable. Impact : A malicious user could exploit this bug to escalate privileges ...
Nessus: "adduser" race condition vulnerability
Background Nessus is a free and powerful network security scanner. Description A race condition can occur in "nessus-adduser" if the user has not configured their TMPDIR variable. Impact A malicious user could exploit this bug to escalate privileges to the rights of the user running...
HP-UX shar utility creates files with predictable names in "/tmp" directory
Overview The shar program distributed with some versions of the HP-UX operating system creates files insecurely. This vulnerability could allow local users to gain escalated privilege on the system. Description shar is a program commonly available on UNIX systems to create a shell script that wil...