CVE-2003-1073 | BDVDB-2026-7941 Detail
Description#
A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (dot dot) sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes place.
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://www.securitytracker.com/id?1005994
- http://isec.pl/vulnerabilities/isec-0008-sun-at.txt
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11180
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11179
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0044.html
- http://www.securityfocus.com/archive/1/308577
- http://secunia.com/advisories/7960/
- http://www.securityfocus.com/bid/6693
- http://www.securityfocus.com/bid/6692
- http://www.ciac.org/ciac/bulletins/n-070.shtml
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-50161-1
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.