CyberSec.Space Logo
Back to CVE Browser

CVE-2003-0098

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0520%
EPSS Percentile41.45th
PublishedMar 3, 2003
Last ModifiedApr 16, 2026

Vulnerability Description

Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request to a slave server.

Affected Platforms (CPE)

📦
Apcupsd

Apcupsd

< 3.8.6
📦
Apcupsd

Apcupsd

>= 3.10.0 and < 3.10.5
💻
Debian

Debian Linux

= 2.2
💻
Debian

Debian Linux

= 3.0

References & Advisories

🔗 ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-015.0.txt
🔗 http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/apcupsd/apcupsd/src/apcnisd.c.diff?r1=1.5&r2=1.6
🔗 http://hsj.shadowpenguin.org/misc/apcupsd_exp.txt
🔗 http://securitytracker.com/id?1006108
🔗 http://sourceforge.net/project/shownotes.php?release_id=137900
🔗 http://www.debian.org/security/2003/dsa-277
🔗 http://www.iss.net/security_center/static/11334.php
🔗 http://www.mandriva.com/security/advisories?name=MDKSA-2003:018

Related Vulnerabilities

CVE-2019-125859.8

Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an Arbitrary Command Execution issue in apcu...

CVE-2017-78848.4

In Adam Kropelin adk0212 APC UPS Daemon through 3.14.14, the default installation of APCUPSD allows a local authenticated, but unp...

CVE-2003-00997.2

Multiple buffer overflows in apcupsd before 3.8.6, and 3.10.x before 3.10.5, may allow attackers to cause a denial of service or e...

CVE-2019-125846.1

Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an XSS issue in apcupsd_status.php.