What’s Vulnerable › Vulnerabilities
CVE-2003-0092
- Severity: high (CVSS 7.2 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2003-04-02 · updated 2026-06-16
Description
Heap-based buffer overflow in dtsession for Solaris 2.5.1 through Solaris 9 allows local users to gain root privileges via a long HOME environment variable.
Affected products
- Sun Solaris: 2.6, 9.0
- Sunos: 5.5.1, 5.7, 5.8
References
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0163.html
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-52388-1
- http://www.securityfocus.com/archive/1/316948/30/25250/threaded
- http://www.securityfocus.com/bid/7240
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1905
- http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0163.html
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-52388-1
- http://www.securityfocus.com/archive/1/316948/30/25250/threaded
- http://www.securityfocus.com/bid/7240
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1905
Get alerted when CVE-2003-0092 or the next vulnerability affects your stack