Unrated severityNVD Advisory· Published Dec 31, 2003· Updated Jun 16, 2026
CVE-2003-1073
CVE-2003-1073
Description
A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (dot dot) sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes place.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
11cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*+ 5 more
- cpe:2.3:o:sun:solaris:2.6:*:*:*:*:*:*:*
- cpe:2.3:o:sun:solaris:7.0:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:solaris:8.0:*:x86:*:*:*:*:*
- cpe:2.3:o:sun:solaris:9.0:*:sparc:*:*:*:*:*
- cpe:2.3:o:sun:solaris:9.0:*:x86:*:*:*:*:*
- (no CPE)range: 6 through 9
cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:o:sun:sunos:-:*:*:*:*:*:*:*
- cpe:2.3:o:sun:sunos:5.5:*:*:*:*:*:*:*
- cpe:2.3:o:sun:sunos:5.5.1:*:*:*:*:*:*:*
- cpe:2.3:o:sun:sunos:5.7:*:*:*:*:*:*:*
- cpe:2.3:o:sun:sunos:5.8:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
11- secunia.com/advisories/7960/nvdPatch
- sunsolve.sun.com/search/document.donvdVendor Advisory
- archives.neohapsis.com/archives/vulnwatch/2003-q1/0044.htmlnvd
- isec.pl/vulnerabilities/isec-0008-sun-at.txtnvd
- www.ciac.org/ciac/bulletins/n-070.shtmlnvd
- www.securityfocus.com/archive/1/308577nvd
- www.securityfocus.com/bid/6692nvd
- www.securityfocus.com/bid/6693nvd
- www.securitytracker.com/idnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/11179nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/11180nvd
News mentions
0No linked articles in our index yet.