PT-2001-1837 · Maxum · Maxum Rumpus Ftp Server

Publicado 2001-09-20 · Atualizado 2017-10-10 · CVE-2001-0644

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Maxum Rumpus FTP Server versions 1.3.3 through 2.0.3 dev 3

Description: The issue allows attackers to gain privileges on the server because passwords are stored in plaintext in the Rumpus User Database file, located in the prefs folder.

Recommendations: For Maxum Rumpus FTP Server versions 1.3.3 through 2.0.3 dev 3, consider restricting access to the prefs folder and the Rumpus User Database file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2001-0644

Produtos afetados

Maxum Rumpus Ftp Server

Referências · 4

• 🔥 http://securityfocus.com/archive/1/184751 · Exploit
• http://securityfocus.com/bid/2718 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-0644 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6543 · Nota