| Package | Affected versions | Patched versions |
|---|---|---|
| chkrootkit | ≤ 0.49 |
The slapper function in chkrootkit before 0.50 does not properly quote file paths, which allows local users to execute arbitrary code via a Trojan horse executable. NOTE: this is only a vulnerability when /tmp is not mounted with the noexec option.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free