Re: APC UPS Power Shute PLUS exploit...

[theo () OMNITI COM (Theo Schlossnagle)]

I have received more requests than I had projected for my code dealing
with the UDP monitoring of systems with APCC UPSs runing Powerchute.

So, check out the following URL to snag the SMALL source tree.  There is
a simple C++ class that allows monitoring of UPS on the network via
UDP.  This distribution also includes the "exploit" that forces _upsd to
just "go away" on machines running it listening to UDP.  The GUI stuff
is written in Motif (cause I wrote if for me not the rest of the
world).  And it was developed on Solaris, so good luck you are running a
different platform.  There aren't all that many syscalls, so I wouldn't
imagine it being hard to port.

http://www.omniti.com/~jesus/xups.tar.gz


--
Theo Schlossnagle
Senior Systems Engineer
OmniTI, Inc.
33131B65/2047/71 F7 95 64 49 76 5D BA  3D 90 B9 9F BE 27 24 E7