CVE-2003-1073

A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .

published February 8, 2005

CVSS
—
EPSS
1%
Percentile
52.1
In the wild
Unconfirmed
What it is

A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (dot dot) sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes place.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00695 · 52.1th percentile
Published
2005-02-08T05:00Z
EPSS history
Timeline
  • 08 FEB 05:00Z
    A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .
    cvelistv5