Server Software and Configuration Services
Security: Chkrootkit Exploit and Fix
An exploitable security bug has been found in chkrootkit:
http://www.securityfocus.com/bid/67813
Chkrootkit has released v0.50 to fix this issue and make improvements:
This is our preferred procedure for compiling and creating a script to run chkrootkit:
cd /root rm -Rfv chkrootkit-0.* wget ftp://ftp.pangeia.com.br/pub/seg/pac/chkrootkit.tar.gz tar -xzf chkrootkit.tar.gz cd chkrootkit-0.50 make sense chmod +x chkrootkit cd .. echo ' cd /root/chkrootkit-0.50 ./chkrootkit -q ' > /root/chkrootkit.sh chmod +x chkrootkit.sh chown -R root:root chkrootkit* rm -fv chkrootkit.tar.gz
Crontab then runs /root/chkrootkit.sh on a regular basis.