📦

rootkit_hunter

Vendor: gentoo

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 0 Code Available
Total RCEs 1 Remote Access
Total CVEs 2 Total Indexed
Avg. EPSS 1.34% Exploit Prob.
Latest CVE CVE-2017-7480 Jul 21

Security Vulnerability Index

Page 1 / 1
9.8 CVSS
CVE-2017-7480
RCE

rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution.

EPSS: 2.34%
2.1 CVSS
CVE-2005-1270

The (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files with predictable file names, which allows local users to overwrite arbitrary files via a symlink attack.

EPSS: 0.34%