tocsin

Debian/rkhunter: unknown

rkhunter in rkhunter 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/rkhunter-debug temporary file. NOTE: this is probably a different vulnerability than CVE-200

Action: Upgrade rkhunter to 1.3.2-6 or later.

Affected

introducedfixedlast affected
01.3.2-6-

Fixed versions

1.3.2-6

Sources

published · modified · JSON