The (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rootkit_hunter | Gentoo | 1.2 (including) | 1.2 (including) |
| Rootkit_hunter | Gentoo | 1.2.1 (including) | 1.2.1 (including) |
| Rootkit_hunter | Gentoo | 1.2.2 (including) | 1.2.2 (including) |
| Rootkit_hunter | Gentoo | 1.2.3 (including) | 1.2.3 (including) |