Patchwire CVEs, their patch status, and feeds to follow them

CVE-2001-1494

Fixed in a distro release EPSS <1%

script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.

Published 2005-06-21 · CVE record · OSV

Products: kernel util-linux, avaya cvlan, avaya integrated_management_suit, avaya interactive_response, avaya intuity_lx, avaya message_networking, avaya messaging_storage_server

Distro releases

ReleasePackageFixed in
Debian 12util-linux2.11n-1
Debian 13util-linux2.11n-1
Debian 14util-linux2.11n-1
Red Hat Enterprise Linux 3losetup0:2.11y-31.11
Red Hat Enterprise Linux 3mount0:2.11y-31.11
Red Hat Enterprise Linux 3util-linux0:2.11y-31.11
Red Hat Enterprise Linux 3util-linux-debuginfo0:2.11y-31.11
Red Hat Enterprise Linux 4util-linux0:2.12a-16.EL4.12
Red Hat Enterprise Linux 4util-linux-debuginfo0:2.12a-16.EL4.12