CVE-2001-0040

APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary process by specifying the target process ID in the apcupsd.pid file.
Configurations

Configuration 1 (hide)

cpe:2.3:a:apc:apcupsd:3.7.2:*:*:*:*:*:*:*

History

20 Nov 2024, 23:34

Type Values Removed Values Added
References () http://archives.neohapsis.com/archives/bugtraq/2000-12/0066.html - Exploit, Vendor Advisory () http://archives.neohapsis.com/archives/bugtraq/2000-12/0066.html - Exploit, Vendor Advisory
References () http://www.linux-mandrake.com/en/security/MDKSA-2000-077.php3 - () http://www.linux-mandrake.com/en/security/MDKSA-2000-077.php3 -
References () http://www.securityfocus.com/bid/2070 - Patch, Vendor Advisory () http://www.securityfocus.com/bid/2070 - Patch, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/5654 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/5654 -

Information

Published : 2001-02-16 05:00

Updated : 2024-11-20 23:34


NVD link : CVE-2001-0040

Mitre link : CVE-2001-0040

CVE.ORG link : CVE-2001-0040


JSON object : View

Products Affected

apc

  • apcupsd