VULNERABILITY INTELLIGENCE
CVE-2000-1134
CVSS score7.2 HIGH
EPSS probability1.42%
CISA KEVNot currently listed
Published2001-01-09
Last modified2026-06-16
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack.