Ubuntu 14.04 LTS: USN-2230-1 Critical Chkrootkit Admin Access Risk

ubuntu

June 4, 2014

chkrootkit could be made to run programs as an administrator.

Summary

chkrootkit could be made to run programs as an administrator.

Software Description:

- chkrootkit: rootkit detector

Details:

Thomas Stangner discovered that chkrootkit incorrectly quoted certain

values. A local attacker could use this issue to execute arbitrary code

when chkrootkit is run and gain root privileges.

Topics Covered

security advisory chkrootkit critical code execution Ubuntu local attack admin access

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 14.04 LTS:
  chkrootkit                      0.49-4.1ubuntu1.14.04.1

Ubuntu 13.10:
  chkrootkit                      0.49-4.1ubuntu1.13.10.1

Ubuntu 12.04 LTS:
  chkrootkit                      0.49-4ubuntu1.1

Ubuntu 10.04 LTS:
  chkrootkit                      0.49-3ubuntu0.1

In general, a standard system update will make all the necessary changes.