Directory traversal vulnerability in printd line printer daemon (lpd) in Solaris 7 through 10 allows remote attackers to delete arbitrary files via ".." sequences in an "Unlink data file" command.
https://exchange.xforce.ibmcloud.com/vulnerabilities/21773
http://www.vupen.com/english/advisories/2005/1342
http://www.ciac.org/ciac/bulletins/p-280.shtml
http://sunsolve.sun.com/search/document.do?assetkey=1-26-101842-1