CVE-2003-1073

Severity: low (CVSS 1.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2003-12-31 · updated 2026-06-16

Description

A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (dot dot) sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes place.

Affected products

Sun Solaris: 2.6, 7.0, 8.0, 9.0
Sunos: 5.5, 5.5.1, 5.7, 5.8

References

http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0044.html
http://isec.pl/vulnerabilities/isec-0008-sun-at.txt
http://secunia.com/advisories/7960/
http://sunsolve.sun.com/search/document.do?assetkey=1-26-50161-1
http://www.ciac.org/ciac/bulletins/n-070.shtml
http://www.securityfocus.com/archive/1/308577
http://www.securityfocus.com/bid/6692
http://www.securityfocus.com/bid/6693
http://www.securitytracker.com/id?1005994
https://exchange.xforce.ibmcloud.com/vulnerabilities/11179
https://exchange.xforce.ibmcloud.com/vulnerabilities/11180
http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0044.html

Get alerted when CVE-2003-1073 or the next vulnerability affects your stack