cve/2001/CVE-2001-1494.md

21 lines
853 B
Markdown
Raw Normal View History

2024-05-26 14:27:05 +02:00
### [CVE-2001-1494](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-1494)
![](https://img.shields.io/static/v1?label=Product&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=n%2Fa&color=brighgreen)
### Description
script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/Shubhamthakur1997/CICD-Demo
- https://github.com/dcambronero/CloudGuard-ShiftLeft-CICD-AWS
- https://github.com/jaydenaung/CloudGuard-ShiftLeft-CICD-AWS
- https://github.com/tp1-SpZIaPvBD/testprojekt