CVE-2014-0476

The slapper function in chkrootkit before 0.50 does not properly quote file paths, which allows local users to execute arbitrary code via a Trojan horse…

published October 25, 2014

CVSS
—
EPSS
4%
Percentile
90.0
In the wild
Unconfirmed
What it is

The slapper function in chkrootkit before 0.50 does not properly quote file paths, which allows local users to execute arbitrary code via a Trojan horse executable. NOTE: this is only a vulnerability when /tmp is not mounted with the noexec option.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03832 · 90.0th percentile
Published
2014-10-25T22:00Z
EPSS history
Timeline
  • 25 OCT 22:00Z
    The slapper function in chkrootkit before 0.50 does not properly quote file paths, which allows local users to execute arbitrary code via a Trojan horse…
    cvelistv5