85 matches found
APC PowerChute Network Shutdown - HTTP Response Splitting Cross-Site Scripting
APC PowerChute Network Shutdown - HTTP Response Splitting Cross-Site Scripting source: https://www.securityfocus.com/bid/33924/info APC PowerChute Network Shutdown is prone to an HTTP-response-splitting vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize...
APC PowerChute Network Shutdown XSS
Digital Security Research Group DSecRG Advisory DSECRG-09-009 ------------------link to original advisory -------------------------- http://www.dsecrg.com/pages/vul/show.php?id=82 Application: APC PowerChute Network Shutdown's Web Interface Vendor URL: http://www.apc.com/ Bug: XSS/Response...
APC PowerChute Network Shutdown - HTTP Response Splitting / Cross-Site Scripting
source: https://www.securityfocus.com/bid/33924/info APC PowerChute Network Shutdown is prone to an HTTP-response-splitting vulnerability and a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary...
[Full-disclosure] APC PowerChute Network Shutdown 2.21 is vulnerable to directory transversal
Synopsis: APC PowerChute Network Shutdown 2.21 is vulnerable to directory transversal Background: APC PowerChute Network Shutdown is used to perform graceful shutdowns of network servers from one main server. Affected Versions: = 2.21 build 116 Description: APC PowerChute Network Shutdown is...
APC PowerChute Network Shutdown directory traversal
Directory traversal in Acme.Serve embedded web server with 5c and 2e...
CVE-2000-1242
The HTTP service in American Power Conversion APC PowerChute uses a default username and password, which allows remote attackers to gain system access...
CVE-2000-1242
CVE-2000-1242 concerns the HTTP service in APC PowerChute that uses a default username and password, enabling remote attackers to gain system access. The vulnerability is documented across multiple feeds (NVD, Red Hat, CVE List) with consistent description. The exact affected scope (software vers...
CVE-2005-4326
The CVE-2005-4326 entry concerns APC PowerChute Network Shutdown’s web interface, where all communication is performed in cleartext (base64-encoded). This design allows remote attackers to sniff authentication credentials. Public references confirm the issue and the metric suggests a network-base...
CVE-2005-4326
The web interface for American Power Conversion APC PowerChute Network Shutdown performs all communication in cleartext base64-encoded, which allows remote attackers to sniff authentication credentials...
CVE-2002-1924
CVE-2002-1924 affects PowerChute Plus 5.0.2. The installation creates a directory named “Pwrchute” that is shared and world-writable, allowing remote attackers to modify or create files within that directory. Root cause: insecure directory permissions at install. Impact: potential unauthorized mo...
CVE-2002-1924
PowerChute plus 5.0.2 creates a "Pwrchute" directory during installation that is shared and world writeable, which could allow remote attackers to modify or create files in that directory...
CVE-2005-1974
Unspecified vulnerability in Java 2 Platform, Standard Edition J2SE 5.0 and 5.0 Update 1 and J2SE 1.4.2 up to 1.4.207, as used in multiple products and platforms including 1 HP-UX and 2 APC PowerChute, allows applications to assign permissions to themselves and gain privileges...
CVE-2005-1974
CVE-2005-1974 corresponds to an unspecified vulnerability in Java 2 Platform (J2SE) 5.0/5.0u1 and 1.4.2 up to 1.4.2_07, affecting multiple platforms including HP-UX and APC PowerChute, where an application can assign permissions to itself and escalate privileges. Connected sources tag this as a J...
CVE-2005-1974
Unspecified vulnerability in Java 2 Platform, Standard Edition J2SE 5.0 and 5.0 Update 1 and J2SE 1.4.2 up to 1.4.207, as used in multiple products and platforms including 1 HP-UX and 2 APC PowerChute, allows applications to assign permissions to themselves and gain privileges...
CVE-2004-2046
Unknown vulnerability in APC PowerChute Business Edition 6.0 through 7.0.1 allows remote attackers to cause a denial of service via unknown attack vectors...
CVE-2004-2046
CVE-2004-2046 affects APC PowerChute Business Edition 6.0–7.0.1. The vulnerability is described as allowing remote denial of service via unknown attack vectors. The NVD entry provides a CVSS v2 base score of 5.0 (medium) with a network attack vector, low attack complexity, no authentication requi...
CVE-2004-2046
Unknown vulnerability in APC PowerChute Business Edition 6.0 through 7.0.1 allows remote attackers to cause a denial of service via unknown attack vectors...
APC Security Advisory – Denial of Service Vulnerability with PowerChuteBusinessEdition
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APC Security Advisory – Denial of Service Vulnerability with PowerChute Business Edition Problem Summary A non-privileged user could cause a denial of service attack on PowerChute Business Edition servers and agents, preventing authorized users from...