CVE-2001-1494: Medium severity kernel util-linux vulnerability
script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1494?
CVE-2001-1494 is classified as a moderate severity vulnerability due to the potential for local users to overwrite arbitrary files.
How do I fix CVE-2001-1494?
To fix CVE-2001-1494, upgrade the util-linux package to version 2.11n or later.
Who is affected by CVE-2001-1494?
Affected users include those running util-linux versions prior to 2.11n, as well as several Avaya products that utilize this package.
What is the nature of the vulnerability in CVE-2001-1494?
CVE-2001-1494 allows local users to exploit the script command by creating a hardlink from the typescript log file to any arbitrary file.
Can CVE-2001-1494 be exploited remotely?
CVE-2001-1494 cannot be directly exploited remotely as it requires local access to the system.