Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Rootkit Hunter本地不安全临时文件创建漏洞
Vulnerability Description
中文名叫"Rootkit猎手"， 可以发现几十个已知的rootkits和一些嗅探器和后门程序. 它通过执行一系列的测试脚本来确认你的机器是否已经感染rootkits. 比如检查rootkits使用的基本文件， 可执行二进制文件的错误文件权限， 检测内核模块等等. Rootkit Hunter的1.2.3-r1之前版本内的(1)check_update.sh和(2)rkhunter脚本以可预测的文件名来创建临时文件，本地用户可以通过一个symlink攻击来重写任意文件。
CVSS Information
N/A
Vulnerability Type
N/A