CVE

Id
6928  
CVE No.
CVE-2003-0099  
Status
Candidate  
Description
Multiple buffer overflows in apcupsd before 3.8.6, and 3.10.x before 3.10.5, may allow attackers to cause a denial of service or execute arbitrary code, related to usage of the vsprintf function.  
Phase
Modified (20071016)  
Votes
ACCEPT(4) Armstrong, Cole, Green, Jones | NOOP(2) Christey, Cox  
Comments
Christey> SUSE:SuSE-SA:2003:022 | CALDERA:CSSA-2003-015.0 | Christey> DEBIAN:DSA-277 | URL:http://www.debian.org/security/2003/dsa-277 | Christey> As observed in an email to us by a third party, it appears | that 3.8.6 is probably not affected by this, so the | description should be changed to refer to "3.10.x before | 3.10.5, and 3.8.x before 3.8.6". | Christey> An email from Kern Sibbald on August 21, 2003, confirmed that | 3.8.6 and 3.10.5 fixed the issue. | | CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=137892  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
39902 6928 CVE-2003-0099 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=137900  View
39903 6928 CVE-2003-0099 CONFIRM:http://sourceforge.net/project/shownotes.php?release_id=137892  View
39904 6928 CVE-2003-0099 CALDERA:CSSA-2003-015.0  View
39905 6928 CVE-2003-0099 URL:ftp://ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-015.0.txt  View
39906 6928 CVE-2003-0099 MANDRAKE:MDKSA-2003:018  View
39907 6928 CVE-2003-0099 URL:http://www.mandriva.com/security/advisories?name=MDKSA-2003:018  View
39908 6928 CVE-2003-0099 SUSE:SuSE-SA:2003:022  View
39909 6928 CVE-2003-0099 URL:http://www.novell.com/linux/security/advisories/2003_022_apcupsd.html  View
39910 6928 CVE-2003-0099 DEBIAN:DSA-277  View
39911 6928 CVE-2003-0099 URL:http://www.debian.org/security/2003/dsa-277  View
39912 6928 CVE-2003-0099 BID:7200  View
39913 6928 CVE-2003-0099 URL:http://www.securityfocus.com/bid/7200  View
39914 6928 CVE-2003-0099 SECTRACK:1006108  View
39915 6928 CVE-2003-0099 URL:http://securitytracker.com/id?1006108  View
39916 6928 CVE-2003-0099 XF:apcupsd-vsprintf-multiple-bo(11491)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63318 JVNDB-2003-000044 Cisco IOS に大量の OSPF neighbor announcements によるサービス運用妨害 (DoS) の脆弱性 Cisco IOS には 1 つのネットワークインタフェース毎に 255 台のホスト以上の neighbor relationship の確立を試みるような、大量の OSPF neighbor announcements を受信することにより、サービス運用妨害 (DoS) 状態が発生する脆弱性が存在します。 CVE-2003-0100 6928 7.5 http://jvndb.jvn.jp/ja/contents/2003/JVNDB-2003-000044.html  View