7.2

CVE-2000-1134

Exploit

Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack.

Data is provided by the National Vulnerability Database (NVD)
Immunix ≫ Immunix Version6.2
Conectiva ≫ Linux Version4.0
Conectiva ≫ Linux Version4.0es
Conectiva ≫ Linux Version4.1
Conectiva ≫ Linux Version4.2
Conectiva ≫ Linux Version5.0
Conectiva ≫ Linux Version5.1
Caldera ≫ Openlinux Edesktop Version2.4
Caldera ≫ Openlinux Eserver Version2.3
Hp ≫ Hp-ux Version11.11
Mandrakesoft ≫ Mandrake Linux Version6.0
Mandrakesoft ≫ Mandrake Linux Version6.1
Mandrakesoft ≫ Mandrake Linux Version7.0
Mandrakesoft ≫ Mandrake Linux Version7.1
Mandrakesoft ≫ Mandrake Linux Version7.2
Redhat ≫ Linux Version5.2
Redhat ≫ Linux Version6.0
Redhat ≫ Linux Version6.1
Redhat ≫ Linux Version6.2
Redhat ≫ Linux Version6.2e
Suse ≫ Suse Linux Version7.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.18% 0.36
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.2 3.9 10
AV:L/AC:L/Au:N/C:C/I:C/A:C
http://www.kb.cert.org/vuls/id/10277
US Government Resource
http://www.securityfocus.com/bid/2006
Patch
Vendor Advisory
Exploit