COMMAND

    at(1)

SYSTEMS AFFECTED

    Systems  running  at  versions  earlier   than  2.7,  or  if   the
    /var/spool/atjobs is world executable.

PROBLEM

    This  bug  can  be  exploited  if  the  user  can  edit a job he's
    submitted to the atrun queue.

SOLUTION

    Upgrade to version 2.7 or higher.