Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

Rootkit Hunter: insecure temporary file creation

Package(s):

rkhunter

CVE #(s):

CAN-2005-1270

Created:

April 26, 2005

Updated:

April 27, 2005

Description:

Sune Kloppenborg Jeppesen and Tavis Ormandy of the Gentoo Linux Security Team have reported that the check_update.sh script and the main rkhunter script insecurely creates several temporary files with predictable filenames.

Alerts:

Gentoo

200504-25

2005-04-26

(Log in to post comments)