CVE-2001-1494 - Secunia Advisories - Vulnerability Intelligence

CVE Reference: CVE-2001-1494
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2001-1494

Description: script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/7718 SAID Secunia Advisory: SA16785 Secunia Advisory: SA18502 REDHAT http://www.redhat.com/support/errata/RHSA-2005-782.html MISC http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm BUGTRAQ http://www.securityfocus.com/archive/1/245151 http://www.securityfocus.com/archive/1/245154 BID 16280

Return to the previous page.