Secunia

A vulnerability has been reported in Sun Solaris, which can be exploited by malicious, local users to perform certain actions with escalated privileges.

The vulnerability is caused due to a race condition when recursively deleting a directory with the rm(1) command. This can be exploited to delete files and directories outside of the selected directory when a privileged user deletes a specially crafted directory hierarchy.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Jim Meyering.

Changelog
Further details available in Customer Area

Original Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-102782-1

Deep Links
Links available in Customer Area