EIP-2026-114725

This exploit leverages a format string vulnerability in Solaris 10's dtprintinfo binary to achieve local privilege escalation on SPARC architecture. It uses a write-what primitive to inject shellcode into the .plt section of libc, bypassing alignment issues and stack constraints.