Lucene search
Gentoo FoundationGLSA-201709-05HistorySep 17, 2017 - 12:00 a.m.
chkrootkit: Local privilege escalation
2017-09-1700:00:00
Gentoo Foundation
security.gentoo.org
36
3.7 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
38.2%
Background
chkrootkit is a tool to locally check for signs of a rootkit.
Description
When /tmp is mounted without the noexec option chkrootkit will execute files in /tmp with root privileges.
Impact
A local attacker could possibly execute arbitrary code with root privileges.
Workaround
Users should mount /tmp with noexec option.
Resolution
All chkrootkit users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose ">=app-forensics/chkrootkit-0.50"
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Gentoo | any | all | app-forensics/chkrootkit | < 0.50 | UNKNOWN |
Related
nessus
nessus
Fedora 19 : chkrootkit-0.49-9.fc19 (2014-7090)
2014-06-13 00:00:00
Mandriva Linux Security Advisory : chkrootkit (MDVSA-2014:122)
2014-06-12 00:00:00
GLSA-201709-05 : chkrootkit: Local privilege escalation
2017-09-18 00:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0249)
2022-01-28 00:00:00
Amazon Linux: Security Advisory (ALAS-2014-370)
2015-09-08 00:00:00
Debian: Security Advisory (DSA-2945-1)
2014-06-02 00:00:00
cve
cve
CVE-2014-0476
2014-10-25 22:55:00
securityvulns
securityvulns
chkrootkit privilege escalation
2014-06-09 00:00:00
[oss-security] CVE-2014-0476 chkrootkit vulnerability
2014-06-09 00:00:00
prion
prion
Input validation
2014-10-25 22:55:00
ubuntucve
ubuntucve
CVE-2014-0476
2014-06-04 00:00:00
zdt
zdt
Chkrootkit Local Privilege Escalation Exploit
2015-11-20 00:00:00
chkrootkit 0.49 - Local Root Vulnerability
2014-06-28 00:00:00
debian
debian
[SECURITY] [DSA 2945-1] chkrootkit security update
2014-06-03 21:37:45
chkrootkit LTS security update
2014-06-04 10:42:00
chkrootkit LTS security update
2014-06-04 10:41:43
amazon
amazon
Important: chkrootkit
2014-07-09 16:36:00
fedora
fedora
[SECURITY] Fedora 20 Update: chkrootkit-0.49-9.fc20
2014-06-13 05:26:35
[SECURITY] Fedora 19 Update: chkrootkit-0.49-9.fc19
2014-06-13 05:30:39
osv
osv
chkrootkit - security update
2014-06-03 00:00:00
ubuntu
ubuntu
chkrootkit vulnerability
2014-06-04 00:00:00
mageia
mageia
Updated chkrootkit packages fix CVE-2014-0476 and a false positive
2014-06-05 00:44:17
debiancve
debiancve
CVE-2014-0476
2014-10-25 22:55:00
packetstorm
packetstorm
Chkrootkit Local Privilege Escalation
2015-11-20 00:00:00
cvelist
cvelist
CVE-2014-0476
2014-10-25 22:00:00
thn
thn
Linux Kernel Vulnerable to Privilege Escalation and DoS Attack
2014-06-07 00:29:00
3.7 Low
CVSS2
Access Vector
LOCAL
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:H/Au:N/C:P/I:P/A:P
0.001 Low
EPSS
Percentile
38.2%
Related for GLSA-201709-05