Unscored severity · published Apr 22, 2002
CVE-2002-0176
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through…
–
CVSS
0.5%
EPSS
No
On KEV
Description
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 40% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libsafe · Avaya
1.3.4; 1.3.8; 2.0.2; 2.0.5; 2.0.9; 2.0.10; +1 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0176
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0176
archives.neohapsis.com
http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html
Exploit
http://online.securityfocus.com/archive/1/263121
www.iss.net
http://www.iss.net/security_center/static/8594.php
Patch
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-026.php
www.securityfocus.com
http://www.securityfocus.com/bid/4327
More from Libsafe
–
CVE-2005-1125
Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before…
–
CVE-2002-0175
libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are…