← Database

CVE-2000-1134

HIGH CVSS: 7.2 Published: 2001-01-09 Modified: 2026-06-16

Description

Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack.

Affected Platforms

Mandrakesoft Mandrake LinuxSuse Suse LinuxImmunix ImmunixHp Hp-UxCaldera Openlinux EdesktopCaldera OpenlinuxConectiva LinuxCaldera Openlinux EserverRedhat Linux

Weakness Type

NVD-CWE-Other

References