CVEvulnerability

CVE-2002-0176

4.6 MEDIUM Published 2002-04-22 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2002-04-22
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P

Description

The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.

Affected configurations

• avaya libsafe 1.3.4 • avaya libsafe 1.3.8 • avaya libsafe 2.0.2 • avaya libsafe 2.0.5 • avaya libsafe 2.0.9 • avaya libsafe 2.0.10 • avaya libsafe 2.0.11

References