106 matches found
[Full-disclosure] APC PowerChute Network Shutdown 2.21 is vulnerable to directory transversal
Synopsis: APC PowerChute Network Shutdown 2.21 is vulnerable to directory transversal Background: APC PowerChute Network Shutdown is used to perform graceful shutdowns of network servers from one main server. Affected Versions: = 2.21 build 116 Description: APC PowerChute Network Shutdown is...
CVE-2000-1242
CVE-2000-1242 concerns the HTTP service in APC PowerChute that uses a default username and password, enabling remote attackers to gain system access. The vulnerability is documented across multiple feeds (NVD, Red Hat, CVE List) with consistent description. The exact affected scope (software vers...
CVE-2000-1242
The HTTP service in American Power Conversion APC PowerChute uses a default username and password, which allows remote attackers to gain system access...
CVE-2005-4326
The CVE-2005-4326 entry concerns APC PowerChute Network Shutdown’s web interface, where all communication is performed in cleartext (base64-encoded). This design allows remote attackers to sniff authentication credentials. Public references confirm the issue and the metric suggests a network-base...
CVE-2005-4326
The web interface for American Power Conversion APC PowerChute Network Shutdown performs all communication in cleartext base64-encoded, which allows remote attackers to sniff authentication credentials...
CVE-2005-4326: Undefined Security Weakness
The web interface for American Power Conversion APC PowerChute Network Shutdown performs all communication in cleartext base64-encoded, which allows remote attackers to sniff authentication credentials...
CVE-2002-1924
CVE-2002-1924 affects PowerChute Plus 5.0.2. The installation creates a directory named “Pwrchute” that is shared and world-writable, allowing remote attackers to modify or create files within that directory. Root cause: insecure directory permissions at install. Impact: potential unauthorized mo...
CVE-2002-1924
PowerChute plus 5.0.2 creates a "Pwrchute" directory during installation that is shared and world writeable, which could allow remote attackers to modify or create files in that directory...
CVE-2002-1924: Undefined Security Weakness
PowerChute plus 5.0.2 creates a "Pwrchute" directory during installation that is shared and world writeable, which could allow remote attackers to modify or create files in that directory...
CVE-2005-1974
Unspecified vulnerability in Java 2 Platform, Standard Edition J2SE 5.0 and 5.0 Update 1 and J2SE 1.4.2 up to 1.4.207, as used in multiple products and platforms including 1 HP-UX and 2 APC PowerChute, allows applications to assign permissions to themselves and gain privileges...
CVE-2005-1974
Unspecified vulnerability in Java 2 Platform, Standard Edition J2SE 5.0 and 5.0 Update 1 and J2SE 1.4.2 up to 1.4.207, as used in multiple products and platforms including 1 HP-UX and 2 APC PowerChute, allows applications to assign permissions to themselves and gain privileges...
CVE-2005-1974
CVE-2005-1974 corresponds to an unspecified vulnerability in Java 2 Platform (J2SE) 5.0/5.0u1 and 1.4.2 up to 1.4.2_07, affecting multiple platforms including HP-UX and APC PowerChute, where an application can assign permissions to itself and escalate privileges. Connected sources tag this as a J...
CVE-2005-1974: Undefined Security Weakness
Unspecified vulnerability in Java 2 Platform, Standard Edition J2SE 5.0 and 5.0 Update 1 and J2SE 1.4.2 up to 1.4.207, as used in multiple products and platforms including 1 HP-UX and 2 APC PowerChute, allows applications to assign permissions to themselves and gain privileges...
CVE-2004-2046
CVE-2004-2046 affects APC PowerChute Business Edition 6.0–7.0.1. The vulnerability is described as allowing remote denial of service via unknown attack vectors. The NVD entry provides a CVSS v2 base score of 5.0 (medium) with a network attack vector, low attack complexity, no authentication requi...
CVE-2004-2046
Unknown vulnerability in APC PowerChute Business Edition 6.0 through 7.0.1 allows remote attackers to cause a denial of service via unknown attack vectors...
CVE-2004-2046: Undefined Security Weakness
Unknown vulnerability in APC PowerChute Business Edition 6.0 through 7.0.1 allows remote attackers to cause a denial of service via unknown attack vectors...
CVE-2004-2046
Unknown vulnerability in APC PowerChute Business Edition 6.0 through 7.0.1 allows remote attackers to cause a denial of service via unknown attack vectors...
APC Security Advisory – Denial of Service Vulnerability with PowerChuteBusinessEdition
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APC Security Advisory – Denial of Service Vulnerability with PowerChute Business Edition Problem Summary A non-privileged user could cause a denial of service attack on PowerChute Business Edition servers and agents, preventing authorized users from...