Nessus 'mi_malware_scan.nbin' Plugin Local Privilege Escalation Vulnerability
BID:66368
Info
Nessus 'mi_malware_scan.nbin' Plugin Local Privilege Escalation Vulnerability
| Bugtraq ID: | 66368 |
| Class: | Design Error |
| CVE: |
CVE-2014-2848 |
| Remote: | No |
| Local: | Yes |
| Published: | Mar 21 2014 12:00AM |
| Updated: | Apr 17 2014 01:09AM |
| Credit: | Neil Jones |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Nessus 'mi_malware_scan.nbin' Plugin Local Privilege Escalation Vulnerability
The 'mi_malware_scan.nbin' plugin for Nessus is prone to a local privilege-escalation vulnerability.
Local attackers could exploit this issue to gain elevated privileges.
Nessus 5.2.1 plugin set 201402092115 is vulnerable; other versions may also be affected.
The 'mi_malware_scan.nbin' plugin for Nessus is prone to a local privilege-escalation vulnerability.
Local attackers could exploit this issue to gain elevated privileges.
Nessus 5.2.1 plugin set 201402092115 is vulnerable; other versions may also be affected.
Exploit / POC
Nessus 'mi_malware_scan.nbin' Plugin Local Privilege Escalation Vulnerability
Local attackers can use readily available tools to exploit this issue.
Local attackers can use readily available tools to exploit this issue.
Solution / Fix
Nessus 'mi_malware_scan.nbin' Plugin Local Privilege Escalation Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Nessus 'mi_malware_scan.nbin' Plugin Local Privilege Escalation Vulnerability
References:
References:
- Nessus Home Page (Tenable Network Security)