CVE-2005-1270 The (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlin...
LowCVSS 2.1
EPSS 0.34%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gentoo rootkit hunter | = 1.2 | No fix listed |
| gentoo rootkit hunter | = 1.2.1 | No fix listed |
| gentoo rootkit hunter | = 1.2.2 | No fix listed |
| gentoo rootkit hunter | = 1.2.3 | No fix listed |
| debian/rkhunter(Debian:12) | < 1.2.7-14 | 1.2.7-14 |
| debian/rkhunter(Debian:13) | < 1.2.7-14 | 1.2.7-14 |
| debian/rkhunter(Debian:14) | < 1.2.7-14 | 1.2.7-14 |
References
- 15127 third-party-advisory
- GLSA-200504-25 patch vendor-advisory
- 15861 vdb-entry
- 13399 patch vdb-entry
- rootkit-hunter-checkupdate-symlink(20279) vdb-entry
- Debian Security Tracker CVE-2005-1270 vendor-advisory