CVE-2014-0476

This Metasploit module exploits CVE-2014-0476 in Chkrootkit by placing a malicious executable at /tmp/update, which is executed as root during the next scheduled scan. The exploit leverages a cron job to escalate privileges.

The vulnerability in chkrootkit's slapper() function allows local attackers to execute arbitrary code as root due to unquoted variable assignment. An attacker can exploit this by placing a malicious executable in /tmp, which gets executed when chkrootkit runs.

This Metasploit module exploits a privilege escalation vulnerability in Chkrootkit before 0.50 by placing an executable named '/tmp/update' that is executed as root during a scheduled scan. The exploit waits for the cron job to trigger the payload.