PT-2003-1040 · Apc · Apcupsd

Publicado 2003-02-26 · Atualizado 2018-09-26 · CVE-2003-0098

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions apcupsd versions 3.8.6 and earlier, 3.10.x versions prior to 3.10.5

Description The issue allows remote attackers to gain root privileges, possibly via format strings in a request to a slave server. Multiple vulnerabilities in the apcupsd package may lead to disruption of confidentiality, integrity, and availability of protected information, and can be exploited remotely.

Recommendations For apcupsd versions 3.8.6 and earlier, update to version 3.8.6 or later. For apcupsd 3.10.x versions prior to 3.10.5, update to version 3.10.5 or later.

Correção

Identificadores relacionados

BDU:2015-04791

CVE-2003-0098

DSA-277

Produtos afetados

Apcupsd

Referências · 17

• http://iss.net/security_center/static/11334.php · Nota
• http://securityfocus.com/bid/6828 · Nota
• http://cvs.sourceforge.net/cgi-bin/viewcvs.cgi/apcupsd/apcupsd/src/apcnisd.c.diff?r1=1.5&r2=1.6 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2003-0098 · Aviso do Fabricante
• ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-015.0.txt · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-04791 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2003-0098 · Nota de Segurança
• https://security-tracker.debian.org/tracker/CVE-2003-0098 · Aviso do Fabricante
• http://mandriva.com/security/advisories?name=MDKSA-2003:018 · Aviso do Fabricante
• http://hsj.shadowpenguin.org/misc/apcupsd_exp.txt · Nota
• http://novell.com/linux/security/advisories/2003_022_apcupsd.html · Aviso do Fabricante
• http://securityfocus.com/bid/7200 · Nota
• http://sourceforge.net/project/shownotes.php?release_id=137900 · Nota
• https://suse.com/support/security/advisories/2003_022_apcupsd.html · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2003-0098 · Aviso do Fabricante