CVE-2003-0092: Sun Solaris

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Heap-based buffer overflow in dtsession for Solaris 2.5.1 through Solaris 9 allows local users to gain root privileges via a long HOME environment variable.

Affected products

• Sun Solaris: version 2.6 only; version 9.0 only
• Sun Sunos: version 5.5.1 only; version 5.7 only; version 5.8 only

Published 2003-04-02. Last modified 2026-06-16.