CVE-2000-1134

Description

From CVE.org

Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack.

Statement

This issue was fixed in the following products:

  • Red Hat Linux 5.0 - RHSA-2000:117 (2000-11-27)
  • Red Hat Linux 5.1 - RHSA-2000:117 (2000-11-27)
  • Red Hat Linux 5.2 - RHSA-2000:117 (2000-11-27)
  • Red Hat Linux 5.2 - RHSA-2000:121 (2000-11-30)
  • Red Hat Linux 6.0 - RHSA-2000:117 (2000-11-27)
  • Red Hat Linux 6.0 - RHSA-2000:121 (2000-11-30)
  • Red Hat Linux 6.1 - RHSA-2000:117 (2000-11-27)
  • Red Hat Linux 6.1 - RHSA-2000:121 (2000-11-30)
  • Red Hat Linux 6.2 - RHSA-2000:117 (2000-11-27)
  • Red Hat Linux 6.2 - RHSA-2000:121 (2000-11-30)
  • Red Hat Linux 7.0 - RHSA-2000:121 (2000-11-30)
  • Red Hat Linux 7.0j - RHSA-2000:121 (2000-11-30)

Frequently Asked Questions

Not sure what something means? Check out our Security Glossary.

Want to get errata notifications? Sign up here.