CVE-2001-1494

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2001-1494
script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.

5.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.6

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

2.1 /10

CVSS v2.0 : LOW

V2 Legend

Vector : AV:L/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 3.9 / Impact : 2.9

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References
Link Resource
http://seclists.org/bugtraq/2001/Dec/0122.html Mailing List Third Party Advisory
http://seclists.org/bugtraq/2001/Dec/0123.html Mailing List Third Party Advisory
http://secunia.com/advisories/16785 Broken Link
http://secunia.com/advisories/18502 Broken Link
http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2005-782.html Broken Link Vendor Advisory
http://www.securityfocus.com/bid/16280 Broken Link Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/7718 Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10723 Broken Link
http://seclists.org/bugtraq/2001/Dec/0122.html Mailing List Third Party Advisory
http://seclists.org/bugtraq/2001/Dec/0123.html Mailing List Third Party Advisory
http://secunia.com/advisories/16785 Broken Link
http://secunia.com/advisories/18502 Broken Link
http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm Third Party Advisory
http://www.redhat.com/support/errata/RHSA-2005-782.html Broken Link Vendor Advisory
http://www.securityfocus.com/bid/16280 Broken Link Third Party Advisory VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/7718 Third Party Advisory VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10723 Broken Link
Configurations

Configuration 1 (hide)

cpe:2.3:a:kernel:util-linux:*:*:*:*:*:*:*:*

Configuration 2 (hide)

OR cpe:2.3:a:avaya:cvlan:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:integrated_management_suit:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:interactive_response:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:intuity_lx:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:message_networking:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:messaging_storage_server:*:*:*:*:*:*:*:*
History

20 Nov 2024, 23:37

Type Values Removed Values Added
References () http://seclists.org/bugtraq/2001/Dec/0122.html - Mailing List, Third Party Advisory () http://seclists.org/bugtraq/2001/Dec/0122.html - Mailing List, Third Party Advisory
References () http://seclists.org/bugtraq/2001/Dec/0123.html - Mailing List, Third Party Advisory () http://seclists.org/bugtraq/2001/Dec/0123.html - Mailing List, Third Party Advisory
References () http://secunia.com/advisories/16785 - Broken Link () http://secunia.com/advisories/16785 - Broken Link
References () http://secunia.com/advisories/18502 - Broken Link () http://secunia.com/advisories/18502 - Broken Link
References () http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm - Third Party Advisory () http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm - Third Party Advisory
References () http://www.redhat.com/support/errata/RHSA-2005-782.html - Broken Link, Vendor Advisory () http://www.redhat.com/support/errata/RHSA-2005-782.html - Broken Link, Vendor Advisory
References () http://www.securityfocus.com/bid/16280 - Broken Link, Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/16280 - Broken Link, Third Party Advisory, VDB Entry
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/7718 - Third Party Advisory, VDB Entry () https://exchange.xforce.ibmcloud.com/vulnerabilities/7718 - Third Party Advisory, VDB Entry
References () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10723 - Broken Link () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10723 - Broken Link

26 Jan 2024, 17:16

Type Values Removed Values Added
CVSS v2 : 2.1
v3 : unknown 		v2 : 2.1
v3 : 5.5
CPE cpe:2.3:a:andries_brouwer:util-linux:*:*:*:*:*:*:*:* cpe:2.3:a:avaya:interactive_response:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:intuity_lx:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:message_networking:*:*:*:*:*:*:*:*
cpe:2.3:a:kernel:util-linux:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:integrated_management_suit:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:cvlan:*:*:*:*:*:*:*:*
cpe:2.3:a:avaya:messaging_storage_server:*:*:*:*:*:*:*:*
First Time Avaya
Avaya interactive Response
Avaya intuity Lx
Avaya cvlan
Avaya integrated Management Suit
Avaya message Networking
Kernel util-linux
Avaya messaging Storage Server
Kernel
CWE NVD-CWE-Other CWE-59
References (SECUNIA) http://secunia.com/advisories/18502 - (SECUNIA) http://secunia.com/advisories/18502 - Broken Link
References (BUGTRAQ) http://seclists.org/bugtraq/2001/Dec/0122.html - (BUGTRAQ) http://seclists.org/bugtraq/2001/Dec/0122.html - Mailing List, Third Party Advisory
References (REDHAT) http://www.redhat.com/support/errata/RHSA-2005-782.html - Vendor Advisory (REDHAT) http://www.redhat.com/support/errata/RHSA-2005-782.html - Broken Link, Vendor Advisory
References (SECUNIA) http://secunia.com/advisories/16785 - (SECUNIA) http://secunia.com/advisories/16785 - Broken Link
References (BID) http://www.securityfocus.com/bid/16280 - (BID) http://www.securityfocus.com/bid/16280 - Broken Link, Third Party Advisory, VDB Entry
References (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10723 - (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10723 - Broken Link
References (BUGTRAQ) http://seclists.org/bugtraq/2001/Dec/0123.html - (BUGTRAQ) http://seclists.org/bugtraq/2001/Dec/0123.html - Mailing List, Third Party Advisory
References (MISC) http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm - (MISC) http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm - Third Party Advisory
References (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/7718 - (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/7718 - Third Party Advisory, VDB Entry
Information

Published : 2001-12-31 05:00

Updated : 2024-11-20 23:37

NVD link : CVE-2001-1494

Mitre link : CVE-2001-1494

CVE.ORG link : CVE-2001-1494

JSON object : View

Products Affected

avaya

  • interactive_response
  • message_networking
  • intuity_lx
  • cvlan
  • messaging_storage_server
  • integrated_management_suit

kernel

  • util-linux
CWE
CWE-59

Improper Link Resolution Before File Access ('Link Following')


NetmanageIT Website NetmanageIT OSINT Web NetmanageIT OpenCTI NetmanageIT PDF Tools NetmanageIT CTO Corner Blog NetmanageIT Email Header Analyzer NetmanageIT Password Pusher NetmanageIT Internet Health and Latency Dashboard NetmanageIT Dedicated Speed Test Site NetmanageIT Ubuntu Mirror 10Gbps Copyright OpenCVE 2024