CVE-2007-0895: Race condition in recursive directory deletion with the (1) -r or (2) -R option in rm in Solaris 8 through...

Security readout for executives and security teams

CVE-2007-0895 is an old Solaris flaw in recursive file deletion. A local user could potentially cause rm to delete files outside the intended directory, with the impact depending on whose account or process ran rm. It matters mainly for legacy Solaris estates and automated cleanup jobs handling user-writable paths. Exposure is most plausible on unpatched Solaris 8, 9, or 10 systems, especially where privileged users, scripts, cron jobs, or operational tooling recursively delete directories that local users can influence. Treat this as a legacy platform hygiene issue, not an internet-facing emergency. Prioritize if Solaris hosts remain in production, especially where shared users or privileged cleanup automation exist. Mitigation focus: Identify any remaining Solaris 8, 9, or 10 systems.; Check vendor guidance for patches released after 2007-02-08.; Avoid privileged recursive deletion of user-writable directory trees..

Prepared

Jun 29, 2026, 07:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.