Vulnerability   
Search   
    Search 324607 CVE descriptions
and 146377 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2014-0476
Description:The slapper function in chkrootkit before 0.50 does not properly quote file paths, which allows local users to execute arbitrary code via a Trojan horse executable. NOTE: this is only a vulnerability when /tmp is not mounted with the noexec option.
Test IDs: 1.3.6.1.4.1.25623.1.0.120579   1.3.6.1.4.1.25623.1.1.10.2014.0249   1.3.6.1.4.1.25623.1.1.1.2.2014.0002   1.3.6.1.4.1.25623.1.0.867866   1.3.6.1.4.1.25623.1.0.841851   1.3.6.1.4.1.25623.1.0.867899   1.3.6.1.4.1.25623.1.0.702945  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2014-0476
Debian Security Information: DSA-2945 (Google Search)
http://www.debian.org/security/2014/dsa-2945
https://www.exploit-db.com/exploits/38775/
https://security.gentoo.org/glsa/201709-05
http://packetstormsecurity.com/files/134484/Chkrootkit-Local-Privilege-Escalation.html
http://www.openwall.com/lists/oss-security/2014/06/04/9
http://osvdb.org/show/osvdb/107710
http://www.ubuntu.com/usn/USN-2230-1




© 1998-2025 E-Soft Inc. All rights reserved.