Entreprise d'experts en Sécurité Informatique : Audits et conseils en cybersécurité
Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com


CVE-2001-1494

Description

script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.

POC

Reference

No PoCs from references.

Github

- https://github.com/Shubhamthakur1997/CICD-Demo

- https://github.com/dcambronero/CloudGuard-ShiftLeft-CICD-AWS

- https://github.com/jaydenaung/CloudGuard-ShiftLeft-CICD-AWS

- https://github.com/tp1-SpZIaPvBD/testprojekt