sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] security update for security/nessus-...

From: Seth Alan Woolley <seth AT positivism.org>
To: sm-security AT lists.ibiblio.org
Subject: [SM-Security] security update for security/nessus-...
Date: Thu, 12 Aug 2004 10:30:52 -0700

I've updated the test version of nessus to stable because it fixes a
nessus-adduser script privilege escalation vulnerability if TMPDIR is
not set.

Not that anybody runs nesses from a machine with many malicious users on
it...

--
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Key id EF10E21A = 36AD 8A92 8499 8439 E6A8 3724 D437 AF5D EF10 E21A
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0xEF10E21A
Security Team Leader Source Mage GNU/Linux http://www.sourcemage.org

Attachment: pgpku3E1_dnZj.pgp
Description: PGP signature

[SM-Security] security update for security/nessus-..., Seth Alan Woolley, 08/12/2004