CVE-2014-0476

CVE-2014-0476 describes a local privilege escalation vulnerability in chkrootkit versions prior to 0.50, affecting Canonical Ubuntu Linux and chkrootkit itself. This flaw, stemming from improper quoting of file paths in the 'slapper' function, allows local users to execute arbitrary code via a Trojan horse executable, provided the /tmp directory is not mounted with the noexec option. With a CVSS score of 3.7 (AV:L/AC:H/Au:N/C:P/I:P/A:P), this vulnerability requires high attack complexity but can lead to partial confidentiality, integrity, and availability compromise. While not listed in CISA's KEV catalog, exploit modules are available in Metasploit and ExploitDB, and it has garnered some community discussion, indicating awareness and potential for exploitation.