CVE-2003-0098

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request to a slave server.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/apcupsd/apcupsd/src/apcnisd.c.diff?r1=1.5&r2=1.6Broken Link, Vendor Advisory
http://hsj.shadowpenguin.org/misc/apcupsd_exp.txtBroken Link
http://securitytracker.com/id?1006108Third Party Advisory, VDB Entry
http://sourceforge.net/project/shownotes.php?release_id=137900Broken Link
http://www.debian.org/security/2003/dsa-277Patch, Vendor Advisory
http://www.iss.net/security_center/static/11334.phpBroken Link
http://www.mandriva.com/security/advisories?name=MDKSA-2003:018Third Party Advisory
http://www.novell.com/linux/security/advisories/2003_022_apcupsd.htmlBroken Link
http://www.securityfocus.com/bid/6828Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/7200Third Party Advisory, VDB Entry
http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/apcupsd/apcupsd/src/apcnisd.c.diff?r1=1.5&r2=1.6Broken Link, Vendor Advisory
http://hsj.shadowpenguin.org/misc/apcupsd_exp.txtBroken Link
http://securitytracker.com/id?1006108Third Party Advisory, VDB Entry
http://sourceforge.net/project/shownotes.php?release_id=137900Broken Link
http://www.debian.org/security/2003/dsa-277Patch, Vendor Advisory
http://www.iss.net/security_center/static/11334.phpBroken Link
http://www.mandriva.com/security/advisories?name=MDKSA-2003:018Third Party Advisory
http://www.novell.com/linux/security/advisories/2003_022_apcupsd.htmlBroken Link
http://www.securityfocus.com/bid/6828Third Party Advisory, VDB Entry
http://www.securityfocus.com/bid/7200Third Party Advisory, VDB Entry

Timeline

Published: Mar 3, 2003
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2003

CVE-2003-00997.2Multiple buffer overflows in apcupsd before 3.8.6, and 3.10.x before 3.10.5, may allow attackers to cause a denial of service or execute arb CVE-2003-01007.5Buffer overflow in Cisco IOS 11.2.x to 12.0.x allows remote attackers to cause a denial of service and possibly execute commands via a large CVE-2003-010110.0miniserv.pl in (1) Webmin before 1.070 and (2) Usermin before 1.000 does not properly handle metacharacters such as line feeds and carriage CVE-2003-01024.6Buffer overflow in tryelf() in readelf.c of the file command allows attackers to execute arbitrary code as the user running file, possibly v CVE-2003-01035.0Format string vulnerability in Nokia 6210 handset allows remote attackers to cause a denial of service (crash, lockup, or restart) via a Mul CVE-2003-01045.0Directory traversal vulnerability in PeopleTools 8.10 through 8.18, 8.40, and 8.41 allows remote attackers to overwrite arbitrary files via CVE-2003-01055.0ServerMask 2.2 and earlier does not obfuscate (1) ETag, (2) HTTP Status Message, or (3) Allow HTTP responses, which could tell remote attack CVE-2003-01067.5The HTTP proxy for Symantec Enterprise Firewall (SEF) 7.0 allows proxy users to bypass pattern matching for blocked URLs via requests that a CVE-2003-01077.5Buffer overflow in the gzprintf function in zlib 1.1.4, when zlib is compiled without vsnprintf or when long inputs are truncated using vsnp CVE-2003-01085.0isakmp_sub_print in tcpdump 3.6 through 3.7.1 allows remote attackers to cause a denial of service (CPU consumption) via a certain malformed CVE-2003-01097.5Buffer overflow in ntdll.dll on Microsoft Windows NT 4.0, Windows NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP allows remote CVE-2003-01105.0The Winsock Proxy service in Microsoft Proxy Server 2.0 and the Microsoft Firewall service in Internet Security and Acceleration (ISA) Serve