CVE-2001-1494
Fixed in a distro release EPSS <1%
script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.
Products: kernel util-linux, avaya cvlan, avaya integrated_management_suit, avaya interactive_response, avaya intuity_lx, avaya message_networking, avaya messaging_storage_server
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | util-linux | 2.11n-1 |
| Debian 13 | util-linux | 2.11n-1 |
| Debian 14 | util-linux | 2.11n-1 |
| Red Hat Enterprise Linux 3 | losetup | 0:2.11y-31.11 |
| Red Hat Enterprise Linux 3 | mount | 0:2.11y-31.11 |
| Red Hat Enterprise Linux 3 | util-linux | 0:2.11y-31.11 |
| Red Hat Enterprise Linux 3 | util-linux-debuginfo | 0:2.11y-31.11 |
| Red Hat Enterprise Linux 4 | util-linux | 0:2.12a-16.EL4.12 |
| Red Hat Enterprise Linux 4 | util-linux-debuginfo | 0:2.12a-16.EL4.12 |