Lucene search
HistoryJun 25, 2002 - 4:00 a.m.
CVE-2002-0175
cve-2002-0175
libsafe 2.0-11
format string vulnerabilities
libc
protection bypass
nvd
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.4%
libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the “'” and “I” characters, which are implemented in libc but not libsafe.
Affected configurations
Node
avayalibsafeMatch1.3.4
ORavayalibsafeMatch1.3.8
ORavayalibsafeMatch2.0.2
ORavayalibsafeMatch2.0.5
ORavayalibsafeMatch2.0.9
ORavayalibsafeMatch2.0.10
ORavayalibsafeMatch2.0.11
Related
nvd
nvd
CVE-2002-0175
2002-04-22 04:00:00
cvelist
cvelist
CVE-2002-0175
2002-06-25 04:00:00
nessus
nessus
Mandrake Linux Security Advisory : libsafe (MDKSA-2002:026)
2004-07-31 00:00:00
4.6 Medium
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:L/AC:L/Au:N/C:P/I:P/A:P
6.8 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
48.4%
Related for CVE-2002-0175