← Vulnerability feed

Vulnerability record · CVE-2002-0176 · published 22 April 2002

CVE-2002-0176: Avaya libsafe vulnerability

Avaya · Libsafe

The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.

4.6 CVSS 2.0 Medium EPSS 0.47% · top 61.9%
4.6CVSS 2.0 base score
0.47%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
10References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.

AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html
http://online.securityfocus.com/archive/1/263121 ExploitPatchVendor Advisory
http://www.iss.net/security_center/static/8594.php
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-026.php PatchVendor Advisory
http://www.securityfocus.com/bid/4327
http://archives.neohapsis.com/archives/vulnwatch/2002-q1/0070.html
http://online.securityfocus.com/archive/1/263121 ExploitPatchVendor Advisory
http://www.iss.net/security_center/static/8594.php
http://www.linux-mandrake.com/en/security/2002/MDKSA-2002-026.php PatchVendor Advisory
http://www.securityfocus.com/bid/4327

Track CVE-2002-0176 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

5.1CVE-2005-1125Avaya libsafe vulnerabilityRace condition in libsafe 2.0.16 and earlier, when running in multi-threaded applications, allows attackers to bypass libsafe protection and exploit …EPSS 6.7%4.6CVE-2002-0175Avaya libsafe vulnerabilitylibsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" ch…EPSS 0.47%

Source: NIST National Vulnerability Database (record CVE-2002-0176), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.