Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2001-0040 — Apcupsd vulnerability

3 documents3 sources

Severity

2.1LOWNVD

EPSS

0.4%

top 40.61%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

APC Apcupsd

Timeline

PublishedFeb 16

Latest updateApr 30

Description

APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary process by specifying the target process ID in the apcupsd.pid file.

CVSS vector

AV:L/AC:L/C:N/I:N/A:PExploitability: 3.9 | Impact: 2.9

Affected Packages1 packages

▶NVDapc/apcupsd3.7.2

Patches

Patch: www.securityfocus.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

GHSA

GHSA-qp9g-233f-wxgh: APC UPS daemon, apcupsd, saves its process ID in a world-writable file, which allows local users to kill an arbitrary process by specifying the target↗2022-04-30

▶

💥Exploits & PoCs

Exploit-DB

APC UPS 3.7.2 - 'apcupsd' Local Denial of Service↗2001-01-15

▶