CVE-2000-1134: High severity Immunix Immunix vulnerability
Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2000-1134?
CVE-2000-1134 is classified as a vulnerability that can lead to local privilege escalation due to the symlink attack.
How do I fix CVE-2000-1134?
To fix CVE-2000-1134, it is recommended to update the affected shell programs to their latest secure versions that mitigate symlink processing.
Which systems are affected by CVE-2000-1134?
CVE-2000-1134 affects various Unix systems, including tcsh, csh, sh, and bash across several distributions like Red Hat, Debian, and Mandrake.
What is a symlink attack in the context of CVE-2000-1134?
A symlink attack in CVE-2000-1134 refers to a method where an attacker exploits the symlink processing by shell programs to overwrite other users' files.
Can CVE-2000-1134 lead to unauthorized access?
Yes, CVE-2000-1134 can potentially allow local users to gain unauthorized access to files of other users by exploiting the symlink vulnerability.