CVEvulnerability

CVE-2000-1134

7.2 HIGH Published 2001-01-09 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-01-09
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C

Description

Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack.

Affected configurations

• immunix immunix 6.2 • conectiva linux 4.0 • conectiva linux 4.0es • conectiva linux 4.1 • conectiva linux 4.2 • conectiva linux 5.0 • conectiva linux 5.1 • caldera openlinux • caldera openlinux edesktop 2.4 • caldera openlinux eserver 2.3 • hp hp-ux 11.11 • mandrakesoft mandrake linux 6.0 • mandrakesoft mandrake linux 6.1 • mandrakesoft mandrake linux 7.0 • mandrakesoft mandrake linux 7.1 • mandrakesoft mandrake linux 7.2 • redhat linux 5.2 • redhat linux 6.0 • redhat linux 6.1 • redhat linux 6.2 • redhat linux 6.2e • suse suse linux 7.0

References