CVE-2006-6495: Buffer Overflow
Stack-based buffer overflow in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via large precision padding values in a format string specifier in the format parameter of the doprf function. NOTE: this issue normally does not cross privilege boundaries, except in cases of external introduction of malicious message files, or if it is leveraged with other vulnerabilities such as CVE-2006-6494.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6495?
CVE-2006-6495 is rated as a medium severity vulnerability due to the potential for local users to execute arbitrary code.
How do I fix CVE-2006-6495?
To fix CVE-2006-6495, it is recommended to apply the relevant security patches provided by Oracle for Solaris 8, 9, and 10.
Who is affected by CVE-2006-6495?
CVE-2006-6495 affects local users on Sun Solaris versions 8, 9, and 10 running on SPARC architecture.
What type of vulnerability is CVE-2006-6495?
CVE-2006-6495 is a stack-based buffer overflow vulnerability found in the ld.so.1 library.
Can CVE-2006-6495 allow remote exploitation?
No, CVE-2006-6495 typically does not allow remote exploitation as it requires local access to the system.