Chkrootkit Local Privilege Escalation
Posted by deepcore on November 20, 2015 – 4:52 pm
Chkrootkit before 0.50 will run any executable file named /tmp/update as root, allowing a trivial privsec. WfsDelay is set to 24h, since this is how often a chkrootkit scan is scheduled by default.
Post a reply
You must be logged in to post a comment.