Unknown vulnerability in apcupsd before 3.8.6, and 3.10.x before 3.10.5, allows remote attackers to gain root privileges, possibly via format strings in a request to a slave server.
http://www.securityfocus.com/bid/7200
http://www.securityfocus.com/bid/6828
http://www.mandriva.com/security/advisories?name=MDKSA-2003:018