Slashdot Mirror

← Back to Stories (view on slashdot.org)

Security in UPS Software?

Posted by Cliff on from the keeps-you-up-thru-a-blackout-leaving-crackers-an-open-door dept.

Anonymous Coward asks: "Does anyone have experience with UPS software that has an eye towards security? i want an alternative to APC's 'Powerchute for Linux'. I've just discovered that Powerchute opens multiple ports and there are no options to turn this 'feature' off. What is even worse is that APC Support has announced no plans to address the issue. This means that if your firewall is running Powerchute, you might have security issues. Another example of the lax security: Powerchute requests root priveliges on install and has a certain 3-letter default password that anyone could guess within 5 minutes! Can anyone help with suggestions for alternative software?" Hmmm... I wonder if I accidentally put the default password in the text of this story.

3 of 42 comments (clear)

  1. NUT! by zulux · · Score: 5, Informative


    NUT talkes with APC and friends. It's GPL'ed and works.

    http://www.exploits.org/nut/

    --

    Moneyed corporations, non-working 'poor' and criminal prisoners are turning productive citizens into tax-slaves.

  2. Use different software by Pauly · · Score: 2, Informative
    Freshmeat has alternatives to this crufty software.

  3. apcupsd by josepha48 · · Score: 4, Informative
    Since you already have an apc, try apcupsd.

    There is an optional cgi monitoring program that by default will listen on port 7000 I believe.

    www.apcupsd.org

    I use it and I do not think it opens any other ports except that one and as I said you don't need to have the cgi on. There is a powerchute clone. It is open source so if it does open a port up you can close this.

    Oh the only other reason you may have ports is if you have slave machines and a master on one ups and you want the master to shut the slaves down. The slaves and masters all have to open communications so that they can be told to shutdown. I think in apcupsd if you have no slaves then this is not an issue.

    --

    Only 'flamers' flame!