CVE-2003-1073
A race condition in the at command for Solaris 2.6 through 9 allows local users to delete...
A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (dot dot) sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes place.
Exploit likelihood
What each source reports
NVD Score used
A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (dot dot) sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes place.
- Record
CVE-2003-1073- CVSS 2.0
- 1.2 Low
AV:L/AC:H/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (dot dot) sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes place.
- Record
CVE-2003-1073- Updated
- 2026-11-02
EUVDEUVD-2003-1063 No score
A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (dot dot) sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes place.
- Record
EUVD-2003-1063- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-r2ff-mfrc-wmc3 No score
A race condition in the at command for Solaris 2.6 through 9 allows local users to delete...
A race condition in the at command for Solaris 2.6 through 9 allows local users to delete arbitrary files via the -r argument with .. (dot dot) sequences in the job name, then modifying the directory structure after at checks permissions to delete the file and before the deletion actually takes place.
- Record
GHSA-r2ff-mfrc-wmc3- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Sun Solaris 2.5/2.6/7.0/8/9 AT Command - Arbitrary File Deletion | 2003-01-27 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2003-1073 is a low vulnerability (CVSS 1.2) in Sun Solaris, published December 31, 2003. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.69%, the 53rd percentile. No source names a fixed version.