The (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Rootkit_hunter | Gentoo | 1.2.1 | 1.2.1 |
Rootkit_hunter | Gentoo | 1.2.3 | 1.2.3 |
Rootkit_hunter | Gentoo | 1.2 | 1.2 |
Rootkit_hunter | Gentoo | 1.2.2 | 1.2.2 |