← Vulnerability feed

Vulnerability record · CVE-2002-0175 · published 22 April 2002

CVE-2002-0175: Avaya libsafe vulnerability

Avaya · Libsafe

libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.

4.6 CVSS 2.0 Medium EPSS 0.47% · top 62.0%
4.6CVSS 2.0 base score
0.47%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.

AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html
http://online.securityfocus.com/archive/1/263121 ExploitPatchVendor Advisory
http://www.iss.net/security_center/static/8593.php
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-026.php PatchVendor Advisory
http://www.securityfocus.com/bid/4326
http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html
http://online.securityfocus.com/archive/1/263121 ExploitPatchVendor Advisory
http://www.iss.net/security_center/static/8593.php
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-026.php PatchVendor Advisory
http://www.securityfocus.com/bid/4326

Track CVE-2002-0175 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

5.1CVE-2005-1125Avaya libsafe vulnerabilityRace condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit …EPSS 6.7%4.6CVE-2002-0176Avaya libsafe vulnerabilityThe printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain…EPSS 0.47%

Source: NIST National Vulnerability Database (record CVE-2002-0175), CISA KEV, FIRST EPSS (scores of 2026-09-29). This page is refreshed as NVD updates the record.