← Back

CVE-2000-1134

nvd nist
Published: Jan 9, 2001Modified: Apr 16, 2026

JSON object

Loading...
7.2
Vector
AV:L/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 3.9 / Impact: 10.0
Source: NVD

Description

Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack.

Affected (22)

Show all products
Conectiva: Linux · Immunix: Immunix · Caldera: Openlinux, Openlinux Edesktop, Openlinux Eserver · Hp: Hp Ux · Mandrakesoft: Mandrake Linux · Redhat: Linux · Suse: Suse Linux
Conectiva
1 product
Linux
Immunix
1 product
Immunix
Caldera
3 products
Openlinux
Openlinux Edesktop
Openlinux Eserver
Hp
1 product
Hp Ux
Mandrakesoft
1 product
Mandrake Linux
Redhat
1 product
Linux
Suse
1 product
Suse Linux
Configuration A
7 vulnerable
Vulnerable SoftwareAffected Versions
Conectiva
Linux
Version 4.0
Linux
Version 4.0es
Linux
Version 4.1
Linux
Version 4.2
Linux
Version 5.0
Linux
Version 5.1
Immunix
Version 6.2
Configuration B
15 vulnerable
Vulnerable SoftwareAffected Versions
Openlinux
All versions
Openlinux Edesktop
Version 2.4
Openlinux Eserver
Version 2.3
Hp Ux
Version 11.11
Mandrakesoft
Mandrake Linux
Version 6.0
Mandrake Linux
Version 6.1
Mandrake Linux
Version 7.0
Mandrake Linux
Version 7.1
Mandrake Linux
Version 7.2
Redhat
Linux
Version 5.2
Linux
Version 6.0
Linux
Version 6.1
Linux
Version 6.2
Linux
Version 6.2e
Suse Linux
Version 7.0

References (38)

ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:76.tcsh-csh.asc (unsafe URL)
Source: cve@mitre.org
PatchVendor Advisory
ftp://patches.sgi.com/support/free/security/advisories/20011103-02-P (unsafe URL)
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
US Government Resource
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
ExploitPatchVendor Advisory
Source: cve@mitre.org
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:76.tcsh-csh.asc (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
ftp://patches.sgi.com/support/free/security/advisories/20011103-02-P (unsafe URL)
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
US Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.