Description
A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows local users to gain privileges.
References
- http://www.nessus.org/nessus_2_0.html
- nessus-adduser-race-condition(16768) vdb-entry
- 12127 third-party-advisory
- GLSA-200408-11 vendor-advisory
- 10784 vdb-entry