COMMAND

    urestore(1)

SYSTEMS AFFECTED

    SVR4/i386 4.0.3
    Potentially any SVR4 including urestore(1)

PROBLEM

    urestore(1)  can  be  used  to  create or overwrite files anywhere
    on the filesystem.

SOLUTION

    Contact your vendor  for a fix.  In the meantime,  limit access to
    urestore by changing mode on /sbin/restore.