CVE-2017-7480

Critical

Published: 21/07/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting in potential remote code execution.

Risk Assessment

The organization may be exposed to remote code execution, which could lead to system compromise.

Recommendation

It is recommended to update rkhunter to version 1.4.4 or later to mitigate this vulnerability.

Original NVD description (English source)

rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution.