Every CVESearch/Get API key

CVE-2002-0175

libsafe 2.0-11 and earlier allows attackers to bypass protection against format string...

4.6 Medium

libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.

Exploit likelihood

0.47%Down 0.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used4.6

libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.

Record
CVE-2002-0175
CVSS 2.0
4.6 MediumAV:L/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE ListNo score

libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.

Record
CVE-2002-0175
Updated
2026-11-02
EUVDEUVD-2002-0173No score

libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.

Record
EUVD-2002-0173
Updated
2026-11-03
GitHub AdvisoriesGHSA-3ccv-38v3-xjvwNo score

libsafe 2.0-11 and earlier allows attackers to bypass protection against format string...

libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.

Record
GHSA-3ccv-38v3-xjvw
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2002-0175 is a medium vulnerability (CVSS 4.6) in Avaya Libsafe, published April 22, 2002. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.47%, the 40th percentile. No source names a fixed version.

References

MoveEnter Open