Login Request a demo
Unscored severity · published Jun 1, 2012
CVE-2012-2944
Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial…
–
CVSS
6.2%
EPSS
No
On KEV
Description
Buffer overflow in the addchar function in common/parseconf.c in upsd in Network UPS Tools (NUT) before 2.6.4 allows remote attackers to execute arbitrary code or cause a denial of service (electric-power outage) via a long string containing non-printable characters.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.2% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NU
Nut · Networkupstools
through 2.6.3-3; 2.4.2; 2.4.3; 2.6.0; 2.6.0; 2.6.0-1; +3 more · source: NVD
Affected product
NU
Nut
Networkupstools
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-2944
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-2944
Exploit
http://alioth.debian.org/tracker/?func=detail&aid=313636
networkupstools.org
http://networkupstools.org/docs/user-manual.chunked/apis01.html
Vendor Advisory
http://secunia.com/advisories/49348
secunia.com
http://secunia.com/advisories/50389
trac.networkupstools.org
http://trac.networkupstools.org/projects/nut/changeset/3633
www.debian.org
http://www.debian.org/security/2012/dsa-2484
More from Nut
8.2
CVE-2026-54160
Network UPS Tools: A PWN Request in make-dist workflow can execute PR-controlled code with write-scoped GITHUB_TOKEN