NVD

Id
78925  
Name
CVE-2001-1494  
Description
script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2001-12-31  
Modified Date
2017-07-10  
Seq
2001-1494  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
394132 78925 CVE-2001-1494 oval:org.mitre.oval:def:10723  View
394133 78925 CVE-2001-1494 20011213 Silly "script" hardlink bug - fixed  View
394134 78925 CVE-2001-1494 20011212 Silly "script" hardlink bug  View
394135 78925 CVE-2001-1494 http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm  View
394136 78925 CVE-2001-1494 RHSA-2005:782  View
394137 78925 CVE-2001-1494 16280  View
394138 78925 CVE-2001-1494 util-linux-script-hardlink(7718)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62196 JVNDB-2005-000398 Util-linux の script コマンドにおける任意のファイルが上書きされる脆弱性 Util-linux の script コマンドにおいて、引数に指定されたファイルがハードリンクであるかどうかを適切にチェックしない脆弱性が存在します。 CVE-2001-1494 4294 CVE-2001-1494 78925 2.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000398.html 2005-06-21 2007-07-31 View