CVE-2001-1494

MediumCVSS 5.5/10Last modified Jun 16, 2026

Description

script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-59

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://seclists.org/bugtraq/2001/Dec/0122.htmlMailing List, Third Party Advisory
http://seclists.org/bugtraq/2001/Dec/0123.htmlMailing List, Third Party Advisory
http://secunia.com/advisories/16785Broken Link
http://secunia.com/advisories/18502Broken Link
http://support.avaya.com/elmodocs2/security/ASA-2006-014.htmThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2005-782.htmlBroken Link, Vendor Advisory
http://www.securityfocus.com/bid/16280Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/7718Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10723Broken Link
http://seclists.org/bugtraq/2001/Dec/0122.htmlMailing List, Third Party Advisory
http://seclists.org/bugtraq/2001/Dec/0123.htmlMailing List, Third Party Advisory
http://secunia.com/advisories/16785Broken Link
http://secunia.com/advisories/18502Broken Link
http://support.avaya.com/elmodocs2/security/ASA-2006-014.htmThird Party Advisory
http://www.redhat.com/support/errata/RHSA-2005-782.htmlBroken Link, Vendor Advisory
http://www.securityfocus.com/bid/16280Broken Link, Third Party Advisory, VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/7718Third Party Advisory, VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10723Broken Link

Timeline

Published: Dec 31, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-14957.5network_query.php in Network Query Tool 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the target par CVE-2001-14969.8Off-by-one buffer overflow in Basic Authentication in Acme Labs thttpd 1.95 through 2.20 allows remote attackers to cause a denial of servic CVE-2001-14972.1Microsoft Internet Explorer 4.0 through 6.0 could allow local users to differentiate between alphanumeric and non-alphanumeric characters us CVE-2001-14987.2Buffer overflow in mod_bf 0.2 allows local users to execute arbitrary commands via a long script.CVE-2001-14995.0Check Point VPN-1 4.1SP4 using SecuRemote returns different error messages for valid and invalid users, with prompts that vary depending on CVE-2001-15007.5ProFTPD 1.2.2rc2, and possibly other versions, does not properly verify reverse-resolved hostnames by performing forward resolution, which a CVE-2001-15015.0The glob functionality in ProFTPD 1.2.1, and possibly other versions allows remote attackers to cause a denial of service (CPU and memory co CVE-2001-15027.5webcart.cgi in Mountain Network Systems WebCart 8.4 allows remote attackers to execute arbitrary commands via shell metacharacters in the NE CVE-2001-15032.1The finger daemon (in.fingerd) in Sun Solaris 2.5 through 8 and SunOS 5.5 through 5.8 allows remote attackers to list all accounts on a host CVE-2001-15047.5Lotus Notes R5 Client 4.6 allows remote attackers to execute arbitrary commands via a Lotus Notes object with code in an event, which is aut CVE-2001-15055.0tinc 1.0pre3 and 1.0pre4 allows remote attackers to inject data into user sessions by sniffing and replaying packets.CVE-2001-15064.6Unknown vulnerability in the file system protection subsystem in HP Secure OS Software for Linux 1.0 allows additional user privileges on so