CVE-2002-0175

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html
http://online.securityfocus.com/archive/1/263121Exploit, Patch, Vendor Advisory
http://www.iss.net/security_center/static/8593.php
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-026.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4326
http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html
http://online.securityfocus.com/archive/1/263121Exploit, Patch, Vendor Advisory
http://www.iss.net/security_center/static/8593.php
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-026.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4326

Timeline

Published: Apr 22, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-01764.6The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploi CVE-2002-01777.5Buffer overflows in icecast 1.3.11 and earlier allows remote attackers to execute arbitrary code via a long HTTP GET request from an MP3 cli CVE-2002-01787.2uudecode, as available in the sharutils package before 4.2.1, does not check whether the filename of the uudecoded file is a pipe or symboli CVE-2002-01797.5Buffer overflow in xpilot-server for XPilot 4.5.0 and earlier allows remote attackers to execute arbitrary code.CVE-2002-01807.5Buffer overflow in Webalizer 2.01-06, when configured to use reverse DNS lookups, allows remote attackers to execute arbitrary code by conne CVE-2002-01817.5Cross-site scripting vulnerability in status.php3 for IMP 2.2.8 and HORDE 1.2.7 allows remote attackers to execute arbitrary web script and CVE-2002-01847.8Sudo before 1.6.6 contains an off-by-one error that can result in a heap-based buffer overflow that may allow local users to gain root privi CVE-2002-01857.5mod_python version 2.7.6 and earlier allows a module indirectly imported by a published module to then be accessed via the publisher, which CVE-2002-01867.5Buffer overflow in the SQLXML ISAPI extension of Microsoft SQL Server 2000 allows remote attackers to execute arbitrary code via data querie CVE-2002-01877.5Cross-site scripting vulnerability in the SQLXML component of Microsoft SQL Server 2000 allows an attacker to execute arbitrary script via t CVE-2002-01887.5Microsoft Internet Explorer 5.01 and 6.0 allow remote attackers to execute arbitrary code via malformed Content-Disposition and Content-Type CVE-2002-01897.5Cross-site scripting vulnerability in Internet Explorer 6.0 allows remote attackers to execute scripts in the Local Computer zone via a URL