high7.2Public exploit code
CVE-2001-0426
Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via a long LANG environmental variable.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SGI IRIX 6.5 / Solaris 7.0/8 CDE - '/usr/dt/bin/dtsession' Local Buffer Overflow2001-04-11 · local · unix · Verified
Impact
Buffer overflow in dtsession on Solaris, and possibly other operating systems, allows local users to gain privileges via a long LANG environmental variable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sun | Solaris | Versions 2.6, 7.0, 8.0 |
| Sun | Sunos | All versions Versions 5.7, 5.8 |