PT-2007-2337 · Sun · Rm

Published 2007-02-13 · Updated 2018-10-30 · CVE-2007-0895

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:L/AC:H/Au:N/C:N/I:P/A:P

Name of the Vulnerable Software and Affected Versions: rm versions in Solaris 8 through 10 before 20070208

Description: A race condition exists in the recursive directory deletion functionality of the rm command, specifically when using the -r or -R option. This issue allows local users to delete files and directories as the user running rm by manipulating the directory structure during the deletion process. The vulnerability arises when a low-level directory is moved to a higher level as it is being deleted, causing rm to change its directory to a higher level than expected, potentially up to the root file system.

Recommendations: For Solaris 8 through 10 before 20070208, update to a version released after 20070208 to resolve the issue.

Fix

Related Identifiers

CVE-2007-0895

Affected Products

Rm

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2007-0895 · Security Note
• http://secunia.com/advisories/24082 · Vendor Advisory
• http://sunsolve.sun.com/search/document.do?assetkey=1-26-102782-1 · Vendor Advisory
• http://osvdb.org/31880 · Note
• http://vupen.com/english/advisories/2007/0543 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32399 · Note
• http://support.avaya.com/elmodocs2/security/ASA-2007-102.htm · Note
• http://secunia.com/advisories/24405 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A8272 · Note