Nessus : Security Vulnerabilities, CVEs, Published In 2004

NessusWX 1.4.4 stores account passwords in plaintext in .session files, which allows local users to obtain passwords.

Nessus 2.0.10a stores account passwords in plaintext in .nessusrc files, which allows local users to obtain passwords. NOTE: the original researcher reports that the vendor has disputed this issue

A race condition in nessus-adduser in Nessus 2.0.11 and possibly earlier versions, if the TMPDIR environment variable is not set, allows local users to gain privileges.