Unscored severity · published Apr 22, 2002
CVE-2002-0175
libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are…
–
CVSS
0.5%
EPSS
No
On KEV
Description
libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libsafe · Avaya
1.3.4; 1.3.8; 2.0.2; 2.0.5; 2.0.9; 2.0.10; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0175
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0175
archives.neohapsis.com
http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html
Exploit
http://online.securityfocus.com/archive/1/263121
www.iss.net
http://www.iss.net/security_center/static/8593.php
Patch
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-026.php
www.securityfocus.com
http://www.securityfocus.com/bid/4326
More from Libsafe
–
CVE-2005-1125
Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before…
–
CVE-2002-0176
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through…