CVE-2003-1073

published 2003-12-31

CVE-2003-1073: A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (dot dot) sequences in…

Priority P4 17 low 1.2 CVSS 2.0

AV L AC H Au N C N I P A N

EXPLOIT

A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (dot dot) sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes place.

Affected

8 ranges

Vendor	Product	Version range	Fixed in
sun	solaris	—	—
sun	solaris	—	—
sun	solaris	—	—
sun	solaris	—	—
sun	sunos	—	—
sun	sunos	—	—
sun	sunos	—	—
sun	sunos	—	—

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.