CVE-2005-1270: The (1) check_update.sh and (2) rkhunter script in Rootkit Hunter before 1.2.3-r1 create temporary files wi...

Security readout for executives and security teams

Rootkit Hunter versions before 1.2.3-r1 used predictable temporary file names. A local user on the same system could exploit that weakness with symbolic links to overwrite files. This matters most on shared Unix-like systems where Rootkit Hunter runs with elevated privileges. Exposure is likely limited to systems running Rootkit Hunter before 1.2.3-r1, especially multi-user hosts or servers where local users can create files in shared temporary locations. Treat as a targeted hygiene fix, not an internet-wide emergency. Prioritize shared servers, administrative systems, and any host where Rootkit Hunter runs with elevated privileges and local user access exists. Mitigation focus: Upgrade Rootkit Hunter to 1.2.3-r1 or later where available.; Check Gentoo or operating-system vendor package guidance for the fixed release.; Limit local shell access on systems running vulnerable Rootkit Hunter versions..

Prepared

Jun 29, 2026, 22:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.