Description
script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/bid/16280 ↗
- http://www.redhat.com/support/errata/RHSA-2005-782.html ↗
- http://seclists.org/bugtraq/2001/Dec/0123.html ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10723 ↗
- http://seclists.org/bugtraq/2001/Dec/0122.html ↗
- http://secunia.com/advisories/16785 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7718 ↗
- http://support.avaya.com/elmodocs2/security/ASA-2006-014.htm ↗
- http://secunia.com/advisories/18502 ↗