CVE-2002-0176: Medium severity Avaya Libsafe vulnerability
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2002-0176?
CVE-2002-0176 is classified as a high severity vulnerability due to its potential exploitation in function calls through unverified arguments.
Which versions are affected by CVE-2002-0176?
CVE-2002-0176 affects Avaya Libsafe versions 1.3.4, 1.3.8, 2.0.2, 2.0.5, 2.0.9, 2.0.10, and 2.0.11.
How do I fix CVE-2002-0176?
To fix CVE-2002-0176, update to a patched version of Avaya Libsafe beyond 2.0.11.
What type of vulnerability is CVE-2002-0176?
CVE-2002-0176 is a code injection vulnerability related to improper handling of argument indexing specifiers.
What can attackers achieve by exploiting CVE-2002-0176?
By exploiting CVE-2002-0176, attackers can manipulate function calls to execute arbitrary code due to unverified input being processed.