|
|
Family: Gentoo Local Security Checks --> Category: infos
[GLSA-200408-11] race condition vulnerability Vulnerability Scan
Vulnerability Scan Summary
race condition vulnerability
Detailed Explanation for this Vulnerability Test
The remote host is affected by the vulnerability described in GLSA-200408-11
( race condition vulnerability)
A race condition can occur in "nessus-adduser" if the user has
not configured their TMPDIR variable.
Impact
A malicious user could exploit this bug to escalate rights to the
rights of the user running "nessus-adduser".
Workaround
There is no known workaround at this time. All users are encouraged to
upgrade to the latest available version of Nessus.
References:
http://secunia.com/advisories/12127/
Solution:
All Nessus users should upgrade to the latest version:
# emerge sync
# emerge -pv ">=net-analyzer/nessus-2.0.12"
# emerge ">=net-analyzer/nessus-2.0.12"
Threat Level: Medium
Click HERE for more information and discussions on this network vulnerability scan.
|
