NVD

Id
65040  
Name
CVE-2006-6495  
Description
Stack-based buffer overflow in ld.so.1 in Sun Solaris 8, 9, and 10 allows local users to execute arbitrary code via large precision padding values in a format string specifier in the format parameter of the doprf function. NOTE: this issue normally does not cross privilege boundaries, except in cases of external introduction of malicious message files, or if it is leveraged with other vulnerabilities such as CVE-2006-6494.  
Reject
 
CVSS Version
2  
CVSS Score
6.6  
Severity
Medium  
CVSS Base Score
6.6  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
2.7  
CVSS Vector
(AV:L/AC:M/Au:S/C:C/I:C/A:C)  
Pub Date
2016-12-20  
Published
2006-12-12  
Modified Date
2011-03-07  
Seq
2006-6495  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
339460 65040 CVE-2006-6495 20061212 Sun Microsystems Solaris ld.so "doprf()" Buffer Overflow Vulnerability  View
339461 65040 CVE-2006-6495 oval:org.mitre.oval:def:1909  View
339462 65040 CVE-2006-6495 1017376  View
339463 65040 CVE-2006-6495 102724  View
339464 65040 CVE-2006-6495 http://support.avaya.com/elmodocs2/security/ASA-2007-019.htm  View
339465 65040 CVE-2006-6495 21564  View
339466 65040 CVE-2006-6495 ADV-2006-4979  View
339467 65040 CVE-2006-6495 solaris-ld-doprf-bo(30848)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
58633 JVNDB-2006-000829 Sun Solaris の ld.so.1 におけるバッファオーバーフローの脆弱性 Sun Solaris の ld.so.1 には、doprf() 関数においてバッファオーバーフローが発生する脆弱性が存在します。 CVE-2006-6495 22597 CVE-2006-6495 65040 6.6 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000829.html 2006-12-12 2007-04-01 View