Multiple buffer overflows in apcupsd before 3.8.6, and 3.10.x before 3.10.5, may allow attackers to cause a denial of service or execute arbitrary code, related to usage of the vsprintf function.
Max CVSS
7.2
EPSS Score
0.09%
Published
2003-03-03
Updated
2008-09-10
APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary process by specifying the target process ID in the apcupsd.pid file.
Max CVSS
2.1
EPSS Score
0.04%
Published
2001-02-16
Updated
2017-10-10
2 vulnerabilities found