CVE

Id
4294  
CVE No.
CVE-2001-1494  
Status
Candidate  
Description
script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.  
Phase
Assigned (20050621)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
20514 4294 CVE-2001-1494 BUGTRAQ:20011212 Silly "script" hardlink bug  View
20515 4294 CVE-2001-1494 URL:http://seclists.org/bugtraq/2001/Dec/0123.html  View
20516 4294 CVE-2001-1494 BUGTRAQ:20011213 Silly "script" hardlink bug - fixed  View
20517 4294 CVE-2001-1494 URL:http://seclists.org/bugtraq/2001/Dec/0122.html  View
20518 4294 CVE-2001-1494 MISC:http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm  View
20519 4294 CVE-2001-1494 REDHAT:RHSA-2005:782  View
20520 4294 CVE-2001-1494 URL:http://www.redhat.com/support/errata/RHSA-2005-782.html  View
20521 4294 CVE-2001-1494 BID:16280  View
20522 4294 CVE-2001-1494 URL:http://www.securityfocus.com/bid/16280  View
20523 4294 CVE-2001-1494 OVAL:oval:org.mitre.oval:def:10723  View
20524 4294 CVE-2001-1494 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:10723  View
20525 4294 CVE-2001-1494 SECUNIA:16785  View
20526 4294 CVE-2001-1494 URL:http://secunia.com/advisories/16785  View
20527 4294 CVE-2001-1494 SECUNIA:18502  View
20528 4294 CVE-2001-1494 URL:http://secunia.com/advisories/18502  View
20529 4294 CVE-2001-1494 XF:util-linux-script-hardlink(7718)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62196 JVNDB-2005-000398 Util-linux の script コマンドにおける任意のファイルが上書きされる脆弱性 Util-linux の script コマンドにおいて、引数に指定されたファイルがハードリンクであるかどうかを適切にチェックしない脆弱性が存在します。 CVE-2001-1494 4294 2.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000398.html  View