CVE-2007-0895: Race Condition
Race condition in recursive directory deletion with the (1) -r or (2) -R option in rm in Solaris 8 through 10 before 20070208 allows local users to delete files and directories as the user running rm by moving a low-level directory to a higher level as it is being deleted, which causes rm to chdir to a ".." directory that is higher than expected, possibly up to the root file system, a related issue to CVE-2002-0435.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-0895?
CVE-2007-0895 is considered a medium severity vulnerability due to its potential for local privilege escalation.
How do I fix CVE-2007-0895?
To fix CVE-2007-0895, ensure you update the Solaris systems to a version released after 20070208 to mitigate the risk.
Who is affected by CVE-2007-0895?
CVE-2007-0895 affects local users on Solaris 8, 9, and 10 systems that use the recursive deletion feature of the rm command.
What is the exploit method for CVE-2007-0895?
The exploit method for CVE-2007-0895 involves manipulating the rm command's directory deletion process to delete files as a different user.
Can CVE-2007-0895 be exploited remotely?
No, CVE-2007-0895 cannot be exploited remotely as it requires local access to the vulnerable Solaris systems.