Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (electric-power outage) via a long string containing non-printable characters.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/75980 | vdb-entry x_refsource_XF |
| http://www.debian.org/security/2012/dsa-2484 | vendor-advisory x_refsource_DEBIAN |
| http://alioth.debian.org/tracker/?func=detail&aid=313636 | x_refsource_CONFIRM |
| http://www.mandriva.com/security/advisories?name=MDVSA-2012:087 | vendor-advisory x_refsource_MANDRIVA |
| http://secunia.com/advisories/50389 | third-party-advisory x_refsource_SECUNIA |
| http://trac.networkupstools.org/projects/nut/changeset/3633 | x_refsource_CONFIRM |
| https://hermes.opensuse.org/messages/15514634 | vendor-advisory x_refsource_SUSE |
| http://secunia.com/advisories/49348 | third-party-advisory x_refsource_SECUNIA |
| http://networkupstools.org/docs/user-manual.chunked/apis01.html | x_refsource_CONFIRM |
| http://www.securityfocus.com/bid/53743 | vdb-entry x_refsource_BID |
| http://www.osvdb.org/82409 | vdb-entry x_refsource_OSVDB |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/75980 | vdb-entry x_refsource_XF x_transferred |
| http://www.debian.org/security/2012/dsa-2484 | vendor-advisory x_refsource_DEBIAN x_transferred |
| http://alioth.debian.org/tracker/?func=detail&aid=313636 | x_refsource_CONFIRM x_transferred |
| http://www.mandriva.com/security/advisories?name=MDVSA-2012:087 | vendor-advisory x_refsource_MANDRIVA x_transferred |
| http://secunia.com/advisories/50389 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://trac.networkupstools.org/projects/nut/changeset/3633 | x_refsource_CONFIRM x_transferred |
| https://hermes.opensuse.org/messages/15514634 | vendor-advisory x_refsource_SUSE x_transferred |
| http://secunia.com/advisories/49348 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://networkupstools.org/docs/user-manual.chunked/apis01.html | x_refsource_CONFIRM x_transferred |
| http://www.securityfocus.com/bid/53743 | vdb-entry x_refsource_BID x_transferred |
| http://www.osvdb.org/82409 | vdb-entry x_refsource_OSVDB x_transferred |