CVE

Id
70143  
CVE No.
CVE-2014-2848  
Status
Candidate  
Description
A race condition in the wmi_malware_scan.nbin plugin before 201402262215 for Nessus 5.2.1 allows local users to gain privileges by replacing the dissolvable agent executable in the Windows temp directory with a Trojan horse program.  
Phase
Assigned (20140411)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
668823 70143 CVE-2014-2848 MISC:https://www.nccgroup.com/en/learning-and-research-centre/technical-advisories/nessus-authenticated-scan-local-privilege-escalation/  View
668824 70143 CVE-2014-2848 CONFIRM:https://discussions.nessus.org/thread/7195  View
668825 70143 CVE-2014-2848 SECTRACK:1029946  View
668826 70143 CVE-2014-2848 URL:http://www.securitytracker.com/id/1029946  View
668827 70143 CVE-2014-2848 SECUNIA:57403  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
13316 JVNDB-2014-002191 Common Unix Printing System の scheduler/client.c におけるクロスサイトスクリプティングの脆弱性 Common Unix Printing System (CUPS) の scheduler/client.c には、is_path_absolute 関数に関する処理に不備があるため、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-2856 70143 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002191.html  View