Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2007-0895
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2007-0895

Description:
Race condition in recursive directory deletion with the (1) -r or (2) -R option in rm in Solaris 8 through 10 before 20070208 allows local users to delete files and directories as the user running rm by moving a low-level directory to a higher level as it is being deleted, which causes rm to chdir to a ".." directory that is higher than expected, possibly up to the root file system, a related issue to CVE-2002-0435.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/32399

SUNALERT
  http://sunsolve.sun.com/search/document.do?assetkey=1-26-102782-1

SAID
  Secunia Advisory: SA24082
  Secunia Advisory: SA24405

OVAL
  http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:8272

OSVDB
  31880

CONFIRM
  http://support.avaya.com/elmodocs2/security/ASA-2007-102.htm


Return to the previous page.