chkrootkit 'slapper()' Function Local Privilege Escalation Vulnerability

Bugtraq ID:	67813
Class:	Design Error
CVE:	CVE-2014-0476
Remote:	No
Local:	Yes
Published:	Jun 04 2014 12:00AM
Updated:	Apr 16 2015 05:49PM
Credit:	Thomas Stangner
Vulnerable:	Ubuntu Ubuntu Linux 12.04 LTS i386 Ubuntu Ubuntu Linux 12.04 LTS amd64 Ubuntu Ubuntu Linux 10.04 sparc Ubuntu Ubuntu Linux 10.04 powerpc Ubuntu Ubuntu Linux 10.04 i386 Ubuntu Ubuntu Linux 10.04 ARM Ubuntu Ubuntu Linux 10.04 amd64 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

chkrootkit 'slapper()' Function Local Privilege Escalation Vulnerability

chkrootkit is prone to a local privilege-escalation vulnerability.

Local attackers could exploit this issue to gain elevated privileges.

Versions prior to chkrootkit 0.50 are vulnerable.

chkrootkit 'slapper()' Function Local Privilege Escalation Vulnerability

Local attackers can use readily available tools to exploit these issues.

chkrootkit 'slapper()' Function Local Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

chkrootkit 'slapper()' Function Local Privilege Escalation Vulnerability

References: