CVE-2000-1134

This exploit leverages multiple vulnerabilities in Red Hat 6.1, including a symlink attack via uucp and predictable file creation in /tmp by bash, to ultimately achieve root privilege escalation. It replaces /usr/sbin/uuconv with a malicious binary that copies a setuid bash shell to the attacker's directory.

This exploit demonstrates a symbolic link attack in Unix shells (bash, tcsh, ksh, sh) due to predictable /tmp file naming and lack of existence checks. It allows local privilege escalation or file corruption by manipulating shell redirection operators.