CVE-2000-1134

highpriority · track · 39OT risk · elevatedEPSS 0.014 · 73 %ileexploit · functionalEURUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

2 exploits · functional

Likely / severe?

1.42% (73rd) EPSS

CVSS 7.2 · high

Is it mine?

25 products

Check your exposure

Who says so?

3 sources

enisa_euvd · fstec_bdu · nvd

EPSS · scored 2026-10-27

Multiple shell programs on various Unix systems, including (1) tcsh, (2) csh, (3) sh, and (4) bash, follow symlinks when processing << redirects (aka here-documents or in-here documents), which allows local users to overwrite files of other users via a symlink attack.

cvss

Technical severity, 0–10. One row per scoring source.

7.2

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 6.5–7.2

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 3.9 · impact 10

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Csecondary · FSTEC (BDU) RU

v2.06.5mediumAV:L/AC:L/Au:N/C:C/I:C/A:C/E:POCsecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-345USLLM-inferredCWE-59USLLM-inferred

exploits (2)

Public proof-of-concept and weaponised exploit code.

EDB-20436Apple Mac OSX 10 / HP-UX 9/10/11 / Mandriva 6/7 / RedHat 5/6 / SCO 5 / IRIX 6 - Shell Redirection Race Conditionfunctional · exploit_db
EDB-217UUCP - File Creation/Overwriting Symlinksfunctional · exploit_db

affected products (25)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
Red Hat Inc. Red Hat Enterprise Linux≤ 7fstec_bduRU
Red Hat Inc. Red Hat Enterprise Linux≤ 6.2fstec_bduRU
caldera openlinuxall versionsnvdUScpe:2.3:o:caldera:openlinux:*:*:*:*:*:*:*:*
caldera openlinux edesktop= 2.4nvdUScpe:2.3:o:caldera:openlinux_edesktop:*:*:*:*:*:*:*:*
caldera openlinux eserver= 2.3nvdUScpe:2.3:o:caldera:openlinux_eserver:*:*:*:*:*:*:*:*
conectiva linux= 4.0nvdUScpe:2.3:o:conectiva:linux:*:*:*:*:*:*:*:*
conectiva linux= 4.0esnvdUScpe:2.3:o:conectiva:linux:*:*:*:*:*:*:*:*
conectiva linux= 4.1nvdUScpe:2.3:o:conectiva:linux:*:*:*:*:*:*:*:*
conectiva linux= 4.2nvdUScpe:2.3:o:conectiva:linux:*:*:*:*:*:*:*:*
conectiva linux= 5.0nvdUScpe:2.3:o:conectiva:linux:*:*:*:*:*:*:*:*
conectiva linux= 5.1nvdUScpe:2.3:o:conectiva:linux:*:*:*:*:*:*:*:*
hp hp-ux= 11.11nvdUScpe:2.3:o:hp:hp-ux:*:*:*:*:*:*:*:*
immunix immunix= 6.2nvdUScpe:2.3:a:immunix:immunix:*:*:*:*:*:*:*:*
mandrakesoft mandrake linux= 6.0nvdUScpe:2.3:o:mandrakesoft:mandrake_linux:*:*:*:*:*:*:*:*
mandrakesoft mandrake linux= 6.1nvdUScpe:2.3:o:mandrakesoft:mandrake_linux:*:*:*:*:*:*:*:*
mandrakesoft mandrake linux= 7.0nvdUScpe:2.3:o:mandrakesoft:mandrake_linux:*:*:*:*:*:*:*:*
mandrakesoft mandrake linux= 7.1nvdUScpe:2.3:o:mandrakesoft:mandrake_linux:*:*:*:*:*:*:*:*
mandrakesoft mandrake linux= 7.2nvdUScpe:2.3:o:mandrakesoft:mandrake_linux:*:*:*:*:*:*:*:*
redhat linux= 5.2nvdUScpe:2.3:o:redhat:linux:*:*:*:*:*:*:*:*

showing 20 of 25

also known as (5)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

enisa_euvd fstec_bdu nvd NVD CVE.org MITRE

published 2001-01-09modified 2026-06-16

references (34)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan