CVE-2004-1445: Nessus

Low severity, CVSS 3.7. EPSS: 0.3% chance of exploitation in the next 30 days.

A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows local users to gain privileges.

Affected products

• Nessus Nessus: version 2.0 only; version 2.0.1 only; version 2.0.2 only; version 2.0.3 only; version 2.0.4 only; version 2.0.5 only; …

Published 2004-12-31. Last modified 2026-06-16.