:Sun has acknowledged a weakness in Sun Solaris, which can be exploited by malicious, local users to perform certain actions with escalated privileges.For more information:SA18579The weakness is reported in Solaris 9 and 10 for both the SPARC and x86 platforms.Solution:The vendor recommends not using the scp command on untrusted filenames, for example on directories that are writable by untrusted users.Original Advisory:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102961-1Other References:SA18579:http://secunia.com/advisories/18579/

Original post by sonia