CVE-2001-1494: Avaya Cvlan

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

script command in the util-linux package before 2.11n allows local users to overwrite arbitrary files by setting a hardlink from the typescript log file to any file on the system, then having root execute the script command.

Affected products

• Avaya Cvlan: any version
• Avaya Integrated Management Suit: any version
• Avaya Interactive Response: any version
• Avaya Intuity Lx: any version
• Avaya Message Networking: any version
• Avaya Messaging Storage Server: any version
• Kernel Util-Linux: before 2.11n (fixed in 2.11n)

Published 2001-12-31. Last modified 2026-06-16.