CVE-2003-0099 Multiple buffer overflows in apcupsd before 3.8.6, and 3.10.x before 3.10.5, may allow attackers to cause a denial of service or execute arbitrary code, related to usage of the vsprintf function.
HighCVSS 7.2
EPSS 0.55%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple buffer overflows in apcupsd before 3.8.6, and 3.10.x before 3.10.5, may allow attackers to cause a denial of service or execute arbitrary code, related to usage of the vsprintf function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apcupsd | = 3.8.5 | No fix listed |
| debian/apcupsd(Debian:12) | < 3.8.5-1.2 | 3.8.5-1.2 |
| debian/apcupsd(Debian:13) | < 3.8.5-1.2 | 3.8.5-1.2 |
| debian/apcupsd(Debian:14) | < 3.8.5-1.2 | 3.8.5-1.2 |
References
- 1006108 vdb-entry
- sourceforge.net
- sourceforge.net vendor-advisory
- DSA-277 patch vendor-advisory
- apcupsd-vsprintf-multiple-bo(11491) vdb-entry vendor-advisory
- MDKSA-2003:018 vendor-advisory
- SuSE-SA:2003:022 vendor-advisory
- 7200 vdb-entry
- Debian Security Tracker CVE-2003-0099 vendor-advisory