CVE-2003-0098 Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request to a slave server.
HighCVSS 10.0
EPSS 5.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request to a slave server.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apcupsd | < 3.8.6 | 3.8.6 |
| apcupsd | >= 3.10.0, < 3.10.5 | 3.10.5 |
| debian linux | = 2.2 | No fix listed |
| debian linux | = 3.0 | No fix listed |
| debian/apcupsd(Debian:12) | < 3.8.5-1.2 | 3.8.5-1.2 |
| debian/apcupsd(Debian:13) | < 3.8.5-1.2 | 3.8.5-1.2 |
| debian/apcupsd(Debian:14) | < 3.8.5-1.2 | 3.8.5-1.2 |
References
- cvs.sourceforge.net broken-link vendor-advisory
- hsj.shadowpenguin.org broken-link
- 1006108 third-party-advisory vdb-entry
- sourceforge.net broken-link
- DSA-277 patch vendor-advisory
- apcupsd-logevent-format-string(11334) broken-link vdb-entry
- MDKSA-2003:018 third-party-advisory vendor-advisory
- SuSE-SA:2003:022 broken-link vendor-advisory
- 6828 third-party-advisory vdb-entry
- 7200 third-party-advisory vdb-entry
- Debian Security Tracker CVE-2003-0098 vendor-advisory