NetSight
IP …
high7.2Public exploit code

CVE-2000-1134

Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-docu…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack.

Affected products

VendorProductAffected versions
ImmunixImmunix
Version 6.2
ConectivaLinux
Versions 4.0, 4.0es, 4.1, 4.2, 5.0, 5.1
CalderaOpenlinux
All versions
CalderaOpenlinux Edesktop
Version 2.4
CalderaOpenlinux Eserver
Version 2.3
HpHp-Ux
Version 11.11
MandrakesoftMandrake Linux
Versions 6.0, 6.1, 7.0, 7.1, 7.2
RedhatLinux
Versions 5.2, 6.0, 6.1, 6.2, 6.2e
SuseSuse Linux
Version 7.0

References