The slapper function in chkrootkit before 0.50 does not properly quote file paths, which allows local users to execute arbitrary code via a Trojan horse executable. NOTE: this is only a vulnerability when /tmp is not mounted with the noexec option.
{ "availability": "No subscription required", "binaries": [ { "binary_name": "chkrootkit", "binary_version": "0.49-4.1ubuntu1.14.04.1" } ] }