EIP-2026-114733

This exploit leverages a directory traversal vulnerability in the setuid binary 'dtappgather' on Solaris systems to manipulate file permissions and create a user-owned directory. It then uses a symlink attack to make a locale directory writable, allowing privilege escalation via a shared object file.