CVE-2006-6495

CVE-2006-6495 describes a stack-based buffer overflow in the ld.so.1 dynamic linker in Sun Solaris 8, 9, and 10, allowing local users to execute arbitrary code through large precision padding values in a format string specifier. With a CVSS score of 6.6, this vulnerability has a local attack vector and medium attack complexity, potentially leading to full confidentiality, integrity, and availability compromise. While it typically does not cross privilege boundaries on its own, it could be leveraged with other vulnerabilities. There is no evidence of active exploitation, no known public exploit code (Metasploit, Nuclei, ExploitDB), and minimal community discussion or media coverage.