CVE-2014-0476

The slapper function in chkrootkit before 0.50 does not properly quote file paths, which allows local users to execute arbitrary code via a Trojan horse executable. NOTE: this is only a vulnerability when /tmp is not mounted with the noexec option...

Chkrootkit 0.49 - Local Privilege Escalation

Chkrootkit 0.49 - Local Privilege Escalation We just found a serious vulnerability in the chkrootkit package, which may allow local attackers to gain root access to a box in certain configurations /tmp not mounted noexec. The vulnerability is located in the function slapper in the shellscript...

PT-2014-3646

Name of the Vulnerable Software and Affected Versions chkrootkit versions prior to 0.50 Description The issue arises from the slapper function in chkrootkit, which fails to properly quote file paths. This allows local users to execute arbitrary code via a Trojan horse executable, but only when /t...