Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 16/02/2001 Updated: 10/10/2017

CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9

VMScore: 215

Vector: AV:L/AC:L/Au:N/C:N/I:N/A:P

APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary process by specifying the target process ID in the apcupsd.pid file.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apc apcupsd 3.7.2

/* Local Denial of Service for any linux box running APCUPSD v372 * * APCUPSD has his pid file world writeable, therefore it is possible * to let it kill another pid and create a denial of service against any * running daemon (when the apcupsd is stopped, for example) * * Bug discovered by: Mattias Dartsch <matze@joonixde> * Explo ...

NVD-CWE-Other http://www.securityfocus.com/bid/2070 http://archives.neohapsis.com/archives/bugtraq/2000-12/0066.html http://www.linux-mandrake.com/en/security/MDKSA-2000-077.php3 https://exchange.xforce.ibmcloud.com/vulnerabilities/5654 https://nvd.nist.gov https://www.exploit-db.com/exploits/251/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2001-0040

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect