description: rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution.
problem types: CWE-300
affected:
{
product: rkhunter
vendor: Red Hat, Inc.
versions:
status: affected, version: before 1.4.4
}