CyberSec.Space Logo
CVEブラウザに戻る

CVE-2003-0098

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.0520%
EPSS Percentile41.45th
Published2003年3月3日
Last Modified2026年4月16日

Vulnerability Description

Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request to a slave server.

Affected Platforms (CPE)

📦
Apcupsd

Apcupsd

< 3.8.6
📦
Apcupsd

Apcupsd

>= 3.10.0 and < 3.10.5
💻
Debian

Debian Linux

= 2.2
💻
Debian

Debian Linux

= 3.0

References & Advisories

🔗 ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-015.0.txt
🔗 http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/apcupsd/apcupsd/src/apcnisd.c.diff?r1=1.5&r2=1.6
🔗 http://hsj.shadowpenguin.org/misc/apcupsd_exp.txt
🔗 http://securitytracker.com/id?1006108
🔗 http://sourceforge.net/project/shownotes.php?release_id=137900
🔗 http://www.debian.org/security/2003/dsa-277
🔗 http://www.iss.net/security_center/static/11334.php
🔗 http://www.mandriva.com/security/advisories?name=MDKSA-2003:018

関連する脆弱性情報

CVE-2019-125859.8

Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an Arbitrary Command Execution issue in apcu...

CVE-2017-78848.4

In Adam Kropelin adk0212 APC UPS Daemon through 3.14.14, the default installation of APCUPSD allows a local authenticated, but unp...

CVE-2003-00997.2

Multiple buffer overflows in apcupsd before 3.8.6, and 3.10.x before 3.10.5, may allow attackers to cause a denial of service or e...

CVE-2019-125846.1

Apcupsd 0.3.91_5, as used in pfSense through 2.4.4-RELEASE-p3 and other products, has an XSS issue in apcupsd_status.php.