CVE-2008-4982: rkhunter in rkhunter 1.3.2 allows local users to overwrite arbitrary files via a symlink attack on the /tmp...

Security readout for executives and security teams

CVE-2008-4982 is an old local file-overwrite issue in rkhunter 1.3.2. A user with local access could abuse an insecure temporary debug file in /tmp to overwrite files through a symlink. This is mainly a shared-system or compromised-account risk, not a remote internet-facing issue. Exposure is likely limited to systems running rkhunter 1.3.2 where untrusted or compromised local users can create files in /tmp and trigger or influence rkhunter execution. Treat this as a targeted legacy hygiene issue. Prioritize if rkhunter 1.3.2 exists on multi-user Linux systems or hosts where local account compromise is plausible. It is lower urgency for fully patched, single-user, or non-rkhunter environments. Mitigation focus: Identify systems running rkhunter 1.3.2.; Check Gentoo, Debian, or vendor guidance for fixed packages.; Upgrade or replace affected rkhunter builds through trusted package channels..

Prepared

Jun 28, 2026, 18:15 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.