CVE

Id
7897  
CVE No.
CVE-2003-1073  
Status
Candidate  
Description
A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (dot dot) sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes place.  
Phase
Assigned (20050208)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
47329 7897 CVE-2003-1073 BUGTRAQ:20030127 Sun Microsystems Solaris at -r job name handling and race condition vulnerabilities  View
47330 7897 CVE-2003-1073 URL:http://www.securityfocus.com/archive/1/308577  View
47331 7897 CVE-2003-1073 VULNWATCH:20030127 Sun Microsystems Solaris at -r job name handling and race condition vulnerabilities  View
47332 7897 CVE-2003-1073 URL:http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0044.html  View
47333 7897 CVE-2003-1073 MISC:http://isec.pl/vulnerabilities/isec-0008-sun-at.txt  View
47334 7897 CVE-2003-1073 SUNALERT:50161  View
47335 7897 CVE-2003-1073 URL:http://sunsolve.sun.com/search/document.do?assetkey=1-26-50161-1  View
47336 7897 CVE-2003-1073 CIAC:N-070  View
47337 7897 CVE-2003-1073 URL:http://www.ciac.org/ciac/bulletins/n-070.shtml  View
47338 7897 CVE-2003-1073 BID:6692  View
47339 7897 CVE-2003-1073 URL:http://www.securityfocus.com/bid/6692  View
47340 7897 CVE-2003-1073 BID:6693  View
47341 7897 CVE-2003-1073 URL:http://www.securityfocus.com/bid/6693  View
47342 7897 CVE-2003-1073 SECTRACK:1005994  View
47343 7897 CVE-2003-1073 URL:http://www.securitytracker.com/id?1005994  View
47344 7897 CVE-2003-1073 SECUNIA:7960  View
47345 7897 CVE-2003-1073 URL:http://secunia.com/advisories/7960/  View
47346 7897 CVE-2003-1073 XF:solaris-at-race-condition(11180)  View
47347 7897 CVE-2003-1073 URL:http://xforce.iss.net/xforce/xfdb/11180  View
47348 7897 CVE-2003-1073 XF:solaris-at-directory-traversal(11179)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63332 JVNDB-2003-000058 Sun Solaris の Newtask コマンドにおける root 権限を取得される脆弱性 Sun Solaris に含まれている newtask(1) コマンドには、セキュリティ上の問題のため、権限を取得される脆弱性が存在します。 CVE-2003-1074 7897 7.2 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000058.html  View