Format String Vulnerability in libsafe by ISS

CVE-2002-0175

Summary

libsafe versions 2.0-11 and earlier are susceptible to a security flaw that enables attackers to circumvent format string protections. This vulnerability arises from specific format strings that use the characters "'" and "I", which are recognized by libc but omitted in libsafe. As a result, this oversight allows malicious actors to exploit applications that rely on libsafe for protection against format string vulnerabilities. Proper awareness and timely updates are crucial to mitigate these risks.

References