CVE-2001-0040

LOW 2.1CVE-2001-0040 · Published 16/02/2001 · updated 16/06/2026

In short

CVE-2001-0040 is a LOW (CVSS 2.1) vulnerability affecting apcupsd (apc).
Chance of exploitation in the next 30 days (EPSS): 0.86%, higher than 58.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
apcupsd apc	`= 3.7.2`	No fix yet

Description

APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary process by specifying the target process ID in the apcupsd.pid file.

References

archives.neohapsis.com/archives/bugtraq/2000-12/0066.html · Exploit
linux-mandrake.com/en/security/MDKSA-2000-077.php3
securityfocus.com/bid/2070 · Patch
exchange.xforce.ibmcloud.com/vulnerabilities/5654

More vulnerabilities in apcupsd

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free