CVE-2002-0176 The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not veri...
MediumCVSS 4.6
EPSS 0.47%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| avaya libsafe | = 1.3.4 | No fix listed |
| avaya libsafe | = 1.3.8 | No fix listed |
| avaya libsafe | = 2.0.2 | No fix listed |
| avaya libsafe | = 2.0.5 | No fix listed |
| avaya libsafe | = 2.0.9 | No fix listed |
| avaya libsafe | = 2.0.10 | No fix listed |
| avaya libsafe | = 2.0.11 | No fix listed |
References
- 20020320 [VulnWatch] Bypassing libsafe format string protection mailing-list
- 20020320 Bypassing libsafe format string protection exploit mailing-list patch vendor-advisory
- libsafe-argnum-protection-bypass(8594) vdb-entry
- MDKSA-2002:026 patch vendor-advisory
- 4327 vdb-entry