Unscored severity · published May 2, 2005
CVE-2005-1125
Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before…
–
CVSS
6.7%
EPSS
No
On KEV
Description
Race condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit other vulnerabilities before the _libsafe_die function call is completed.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.7% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LI
Libsafe · Avaya
2.0.1; 2.0.2; 2.0.3; 2.0.4; 2.0.5; 2.0.6; +10 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1125
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1125
Exploit
http://www.overflow.pl/adv/libsafebypass.txt
Exploit
http://www.securityfocus.com/archive/1/395999
Exploit
http://www.securityfocus.com/bid/13190
More from Libsafe
–
CVE-2002-0175
libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are…
–
CVE-2002-0176
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through…