Description
libsafe 2.0-11 and earlier allows attackers to bypass protection against format string vulnerabilities via format strings that use the "'" and "I" characters, which are implemented in libc but not libsafe.
References
- libsafe-flagchar-protection-bypass(8593) vdb-entry
- 20020320 [VulnWatch] Bypassing libsafe format string protection mailing-list
- 20020320 Bypassing libsafe format string protection mailing-list
- 4326 vdb-entry
- MDKSA-2002:026 vendor-advisory