Published: 25/10/2014 Updated: 19/09/2017

CVSS v2 Base Score: 3.7 | Impact Score: 6.4 | Exploitability Score: 1.9

VMScore: 380

Vector: AV:L/AC:H/Au:N/C:P/I:P/A:P

The slapper function in chkrootkit prior to 0.50 does not properly quote file paths, which allows local users to execute arbitrary code via a Trojan horse executable. NOTE: this is only a vulnerability when /tmp is not mounted with the noexec option.

Vulnerable Product	Search on Vulmon	Subscribe to Product
canonical ubuntu linux 12.04
canonical ubuntu linux 10.04
canonical ubuntu linux 14.04
canonical ubuntu linux 13.10
chkrootkit chkrootkit

# OpenVAS Vulnerability Test # $Id: deb_2945nasl 14302 2019-03-19 08:28:48Z cfischer $ # Auto-generated from advisory DSA 2945-1 using nvtgen 10 # Script version: 10 # # Author: # Greenbone Networks # # Copyright: # Copyright (c) 2014 Greenbone Networks GmbH greenbonenet # Text descriptions are largely excerpted from the referenced # adv ...

chkrootkit could be made to run programs as an administrator ...

A quoting issue was found in chkrootkit which would lead to a file in /tmp/ being executed, if /tmp/ was mounted without the noexec option chkrootkit is typically run as the root user A local attacker could use this flaw to escalate their privileges ...

We just found a serious vulnerability in the chkrootkit package, which may allow local attackers to gain root access to a box in certain configurations (/tmp not mounted noexec) The vulnerability is located in the function slapper() in the shellscript chkrootkit: # # SLAPPER{A,B,C,D} and the multi-platform variant # slapper (){ SLAPPER_FILES ...

## # This module requires Metasploit: metasploitcom/download # Current source: githubcom/rapid7/metasploit-framework ## class Metasploit4 < Msf::Exploit::Local # This could also be Excellent, but since it requires # up to one day to pop a shell, let's set it to Manual instead Rank = ManualRanking include Msf::Post::F ...

CWE-20 http://www.debian.org/security/2014/dsa-2945 http://www.openwall.com/lists/oss-security/2014/06/04/9 http://www.chkrootkit.org/http://www.ubuntu.com/usn/USN-2230-1 https://www.exploit-db.com/exploits/38775/http://osvdb.org/show/osvdb/107710 http://packetstormsecurity.com/files/134484/Chkrootkit-Local-Privilege-Escalation.html https://security.gentoo.org/glsa/201709-05 218766ad7b3d8879803mjab0f76b02feb https://usn.ubuntu.com/2230-1/https://nvd.nist.gov https://www.exploit-db.com/exploits/33899/

CVE-2014-0476

Vulnerability Summary

Vulnerability Trend

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect