Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2002-0176

EPSS 0.16% · P36
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2002-0176

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The printf wrappers in libsafe 2.0-11 and earlier do not properly handle argument indexing specifiers, which could allow attackers to exploit certain function calls through arguments that are not verified by libsafe.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Libsafe格式串参数数目检查可绕过漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Libsafe是免费开放源代码设计用于保护缓冲溢出和格式化串攻击的程序，由Avaya Labs开发维护，运行在Linux系统下。 Libsafe对部分C库格式标识不能正确解析，可导致格式字符串攻击可绕过。 Libsafe对C库中的格式标识"%2$n"没有进行正确的解析，当此格式标识"%2$n"使用两个参数的时候，第一个参数的格式化串将被Libsafe检查，而第二个参数的格式化串没有被Libsafe检查，因此攻击者可以第二个格式化串不检查漏洞进行攻击而绕过Libsafe的保护。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2002-0176

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2002-0176

Please Login to view more intelligence information

Same Patch Batch · n/a · 2002-06-25 · 190 CVEs total

CVE-2002-0027Microsoft Internet Explorer安全漏洞
CVE-2002-0002STunnel客户端协商协议格式串溢出漏洞
CVE-2002-0003Groff预处理器缓冲区溢出漏洞
CVE-2002-0004AT 畸形时间格式导致堆溢出漏洞
CVE-2002-0007BugZilla LDAP认证绕过漏洞
CVE-2002-0018Microsoft Windows网络域间信任关系提升权限漏洞(MS02-001)
CVE-2002-0020Microsoft Telnet Server协议选项缓冲溢出漏洞(MS02-004)
CVE-2002-0021Macintosh Microsoft Office v. X Network PID检查器服务拒绝漏洞
CVE-2002-0022Microsoft Internet Explorer安全漏洞
CVE-2002-0023Microsoft Internet Explorer安全漏洞
CVE-2002-0025Microsoft Internet Explorer安全漏洞
CVE-2002-0026Microsoft Internet Explorer安全漏洞
CVE-2002-0045OpenLDAP认证用户目标属性缺失漏洞
CVE-2002-0051Microsoft Windows 2000组策略锁定漏洞(MS02-016)
CVE-2002-0050Microsoft Commerce Server ISAPI远程缓冲区溢出漏洞(MS02-033)
CVE-2002-0049Microsoft Exchange Server 安全漏洞
CVE-2002-0047CIPE VPN数据包服务拒绝漏洞
CVE-2002-0046Linux kernel内存信息泄露漏洞
CVE-2002-0040SGI IRIX HOSTALIASES拒绝服务攻击漏洞
CVE-2002-0028ICQ缓冲区溢出漏洞

Showing top 20 of 190 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2002-0176

No comments yet

Leave a comment