USN-2230-1: chkrootkit vulnerability
4 June 2014
chkrootkit could be made to run programs as an administrator.
Releases
Packages
- chkrootkit - rootkit detector
Details
Thomas Stangner discovered that chkrootkit incorrectly quoted certain
values. A local attacker could use this issue to execute arbitrary code
when chkrootkit is run and gain root privileges.
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 14.04
Ubuntu 13.10
Ubuntu 12.04
Ubuntu 10.04
In general, a standard system update will make all the necessary changes.