UUCP Exploit - File Creation/Overwriting (symlinks) Exploit漏洞 - Ali_nvd

CVE编号

CVE-2000-1134

利用情况

暂无

补丁情况

N/A

披露时间

2001-01-09

各种Unix系统上的多个shell程序，包括(1)tcsh、(2)csh、(3)sh和(4)bash，在处理 << redirects(也称为here-documents或in-here documents)时遵循符号链接，这允许本地用户通过符号链接攻击覆盖其他用户的文件。

建议您更新当前系统或软件至最新版，完成漏洞的修复。

参考链接
ftp://ftp.FreeBSD.org/pub/FreeBSD/CERT/advisories/FreeBSD-SA-00:76.tcsh-csh.asc
ftp://patches.sgi.com/support/free/security/advisories/20011103-02-P
http://archives.neohapsis.com/archives/bugtraq/2000-10/0418.html
http://archives.neohapsis.com/archives/tru64/2002-q1/0009.html
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000350
http://distro.conectiva.com.br/atualizacoes/?id=a&anuncio=000354
http://marc.info/?l=bugtraq&m=97561816504170&w=2
http://www.calderasystems.com/support/security/advisories/CSSA-2000-042.0.txt
http://www.calderasystems.com/support/security/advisories/CSSA-2000-043.0.txt
http://www.debian.org/security/2000/20001111a
http://www.kb.cert.org/vuls/id/10277
http://www.linux-mandrake.com/en/security/MDKSA-2000-069.php3
http://www.linux-mandrake.com/en/security/MDKSA-2000-075.php3
http://www.redhat.com/support/errata/RHSA-2000-117.html
http://www.redhat.com/support/errata/RHSA-2000-121.html
http://www.securityfocus.com/archive/1/146657
http://www.securityfocus.com/bid/1926
http://www.securityfocus.com/bid/2006
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.ova...

AV:L/AC:L/Au:N/C:C/I:C/A:C CWE-ID 漏洞类型 NVD-CWE-Other

UUCP Exploit - File Creation/Overwriting (symlinks) Exploit漏洞