CVE-2000-1134
- State
- Published
- Severity
- Not scored
- Published
- Dec 19, 2000
- Updated
- Aug 8, 2024
- Reserved
- Dec 14, 2000
Description
Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 20001111avendor-advisory
- 1926vdb-entry
- CLA-2000:350vendor-advisory
- oval:org.mitre.oval:def:4047vdb-entrysignature
- SSRT1-41Uvendor-advisory
- 2006vdb-entry
- MDKSA-2000-069vendor-advisory
- CSSA-2000-042.0vendor-advisory
- RHSA-2000:117vendor-advisory
- VU#10277third-party-advisory
- 20001130 [ADV/EXP]: RH6.x root from bash /tmp vuln + MOREmailing-list
- 20001028 tcsh: unsafe tempfile in << redirectsmailing-list
- MDKSA-2000:075vendor-advisory
- CSSA-2000-043.0vendor-advisory
- 20001128 /bin/sh creates insecure tmp filesmailing-list
- CLSA-2000:354vendor-advisory
- RHSA-2000:121vendor-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.