CVE-2003-0099

HIGH 7.2CVE-2003-0099 · Published 03/03/2003 · updated 16/06/2026

In short

CVE-2003-0099 is a HIGH (CVSS 7.2) vulnerability affecting apcupsd (apc).
Chance of exploitation in the next 30 days (EPSS): 0.55%, higher than 46.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
apcupsd apc	`= 3.8.5`	No fix yet

Description

Multiple buffer overflows in apcupsd before 3.8.6, and 3.10.x before 3.10.5, may allow attackers to cause a denial of service or execute arbitrary code, related to usage of the vsprintf function.

References

ftp.caldera.com/pub/security/OpenLinux/CSSA-2003-015.0.txt
securitytracker.com/id
sourceforge.net/project/shownotes.php
sourceforge.net/project/shownotes.php · Vendor Advisory
debian.org/security/2003/dsa-277 · Patch
iss.net/security_center/static/11491.php · Vendor Advisory
mandriva.com/security/advisories
novell.com/linux/security/advisories/2003_022_apcupsd.html
securityfocus.com/bid/7200

More vulnerabilities in apcupsd

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free