CVE-2002-0175 libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not lib...
MediumCVSS 4.6
EPSS 0.47%
- Published
- Updated
- Exploit status
- No public exploit known
Description
libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| avaya libsafe | = 1.3.4 | No fix listed |
| avaya libsafe | = 1.3.8 | No fix listed |
| avaya libsafe | = 2.0.2 | No fix listed |
| avaya libsafe | = 2.0.5 | No fix listed |
| avaya libsafe | = 2.0.9 | No fix listed |
| avaya libsafe | = 2.0.10 | No fix listed |
| avaya libsafe | = 2.0.11 | No fix listed |
References
- 20020320 [VulnWatch] Bypassing libsafe format string protection mailing-list
- 20020320 Bypassing libsafe format string protection exploit mailing-list patch vendor-advisory
- libsafe-flagchar-protection-bypass(8593) vdb-entry
- MDKSA-2002:026 patch vendor-advisory
- 4326 vdb-entry