CVE-2012-2944 Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (electric-p...
HighCVSS 7.5
EPSS 6.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (electric-power outage) via a long string containing non-printable characters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/nut(Debian:12) | < 2.6.4-1 | 2.6.4-1 |
| debian/nut(Debian:13) | < 2.6.4-1 | 2.6.4-1 |
| debian/nut(Debian:14) | < 2.6.4-1 | 2.6.4-1 |
| networkupstools nut | <= 2.6.3-3 | No fix listed |
| networkupstools nut | = 2.4.2 | No fix listed |
| networkupstools nut | = 2.4.3 | No fix listed |
| networkupstools nut | = 2.6.0 | No fix listed |
| networkupstools nut | = 2.6.0-pre1 | No fix listed |
| networkupstools nut | = 2.6.0-1 | No fix listed |
| networkupstools nut | = 2.6.1 | No fix listed |
| networkupstools nut | = 2.6.1-1 | No fix listed |
| networkupstools nut | = 2.6.3-1 | No fix listed |
References
- Debian Security Tracker CVE-2012-2944 vendor-advisory
- alioth.debian.org exploit
- networkupstools.org
- 49348 third-party-advisory vendor-advisory
- 50389 third-party-advisory
- trac.networkupstools.org
- DSA-2484 vendor-advisory
- MDVSA-2012:087 vendor-advisory
- 82409 vdb-entry
- 53743 vdb-entry
- networkupstools-addchar-bo(75980) vdb-entry
- openSUSE-SU-2012:1069 vendor-advisory