• info
• discussion
• exploit
• solution
• references

Libsafe Format String Unimplemented Specifier Exploitation Vulnerability

Solution:
A fixed version is available:


Avaya Labs Libsafe 1.3 -4

• Avaya Labs libsafe-2.0-12.tgz
  http://www.research.avayalabs.com/project/libsafe/src/libsafe-2.0-12.t gz


• MandrakeSoft libsafe-2.0.13-1.2mdk.i586.rpm
  for Linux-Mandrake 7.1
  http://www.mandrakesecure.net/en/ftp.php

Avaya Labs Libsafe 1.3 -8

• Avaya Labs libsafe-2.0-12.tgz
  http://www.research.avayalabs.com/project/libsafe/src/libsafe-2.0-12.t gz


• MandrakeSoft libsafe-2.0.13-1.2mdk.i586.rpm
  for Corporate Server 1.0.1
  http://www.mandrakesecure.net/en/ftp.php


• MandrakeSoft libsafe-2.0.13-1.2mdk.i586.rpm
  for Linux-Mandrake 7.2.
  http://www.mandrakesecure.net/en/ftp.php


• MandrakeSoft libsafe-2.0.13-1.2mdk.i586.rpm
  for Single Network Firewall 7.2
  http://www.mandrakesecure.net/en/ftp.php

Avaya Labs Libsafe 2.0 -11

• Avaya Labs libsafe-2.0-12.tgz
  http://www.research.avayalabs.com/project/libsafe/src/libsafe-2.0-12.t gz

Avaya Labs Libsafe 2.0 -5

• Avaya Labs libsafe-2.0-12.tgz
  http://www.research.avayalabs.com/project/libsafe/src/libsafe-2.0-12.t gz


• MandrakeSoft libsafe-2.0.13-1.2mdk.i586.rpm
  for Mandrake Linux 8.1
  http://www.mandrakesecure.net/en/ftp.php


• MandrakeSoft libsafe-2.0.13-1.2mdk.i586.rpm
  for Mandrake Linux 8.2
  http://www.mandrakesecure.net/en/ftp.php

Avaya Labs Libsafe 2.0 -10

• Avaya Labs libsafe-2.0-12.tgz
  http://www.research.avayalabs.com/project/libsafe/src/libsafe-2.0-12.t gz

Avaya Labs Libsafe 2.0 -2

• Avaya Labs libsafe-2.0-12.tgz
  http://www.research.avayalabs.com/project/libsafe/src/libsafe-2.0-12.t gz


• MandrakeSoft libsafe-2.0.13-1.2mdk.i586.rpm
  for Mandrake Linux 8.0
  http://www.mandrakesecure.net/en/ftp.php

Avaya Labs Libsafe 2.0 -9

• Avaya Labs libsafe-2.0-12.tgz
  http://www.research.avayalabs.com/project/libsafe/src/libsafe-2.0-12.t gz