Summary
Thomas Stangner discovered that chkrootkit incorrectly quoted certain
values. A local attacker could use this issue to execute arbitrary code
when chkrootkit is run and gain root privileges.
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | chkrootkit | 0.49-4.1ubuntu1.14.04.1 |
Vulnerabilities 1
-
Unscored —CVE-2014-0476 Public exploit
The slapper function in chkrootkit before 0.50 does not properly quote file paths, which allows local users to execute …
References
-
report
https://ubuntu.com/security/CVE-2014-0476