NVD

Id
29370  
Name
CVE-2014-0476  
Description
The slapper function in chkrootkit before 0.50 does not properly quote file paths, which allows local users to execute arbitrary code via a Trojan horse executable. NOTE: this is only a vulnerability when /tmp is not mounted with the noexec option.  
Reject
 
CVSS Version
2  
CVSS Score
3.7  
Severity
Low  
CVSS Base Score
3.7  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-10-25  
Modified Date
2016-12-06  
Seq
2014-0476  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
155866 29370 CVE-2014-0476 107710  View
155867 29370 CVE-2014-0476 http://packetstormsecurity.com/files/134484/Chkrootkit-Local-Privilege-Escalation.html  View
155868 29370 CVE-2014-0476 http://www.chkrootkit.org/  View
155869 29370 CVE-2014-0476 DSA-2945  View
155870 29370 CVE-2014-0476 [oss-security] 20140604 CVE-2014-0476 chkrootkit vulnerability  View
155871 29370 CVE-2014-0476 USN-2230-1  View
155872 29370 CVE-2014-0476 38775  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16230 JVNDB-2014-005105 chkrootkit の slapper 関数における任意のコードを実行される脆弱性 chkrootkit の slapper 関数は、ファイルパスを適切に引用しないため、任意のコードを実行される脆弱性が存在します。 CVE-2014-0476 67877 CVE-2014-0476 29370 3.7 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-005105.html 2014-06-04 2014-10-29 View