NVD

Id
74145  
Name
CVE-2003-1073  
Description
A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (dot dot) sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes place.  
Reject
 
CVSS Version
2  
CVSS Score
1.2  
Severity
Low  
CVSS Base Score
1.2  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
1.9  
CVSS Vector
(AV:L/AC:H/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2003-12-31  
Modified Date
2017-07-10  
Seq
2003-1073  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
381219 74145 CVE-2003-1073 20030127 Sun Microsystems Solaris at -r job name handling and race condition vulnerabilities  View
381220 74145 CVE-2003-1073 http://isec.pl/vulnerabilities/isec-0008-sun-at.txt  View
381221 74145 CVE-2003-1073 50161  View
381222 74145 CVE-2003-1073 N-070  View
381223 74145 CVE-2003-1073 20030127 Sun Microsystems Solaris at -r job name handling and race condition vulnerabilities  View
381224 74145 CVE-2003-1073 6692  View
381225 74145 CVE-2003-1073 6693  View
381226 74145 CVE-2003-1073 1005994  View
381227 74145 CVE-2003-1073 solaris-at-directory-traversal(11179)  View
381228 74145 CVE-2003-1073 solaris-at-race-condition(11180)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
63294 JVNDB-2003-000020 Sun Solaris の at コマンドにおける競合状態の脆弱性 Sun Solaris に含まれている at コマンドには、 "-r" オプションの引数として与えられた内容の妥当性のチェックが不適切であるため、コマンド用のジョブスプールディレクトリの範囲外のファイル削除をすることが可能な脆弱性が存在します。 CVE-2003-1073 7896 CVE-2003-1073 74145 1.2 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000020.html 2003-01-27 2007-04-01 View