PT-2007-1515 · Maxum · Rumpus

Publicado 2007-01-19 · Atualizado 2017-07-29 · CVE-2007-0019

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Rumpus versions 5.1 and earlier

Description The issue involves multiple heap-based buffer overflows in the rumpusd component. This can be exploited by remote authenticated users through a long LIST command and other unspecified requests to the FTP service, allowing them to execute arbitrary code. Additionally, remote attackers can execute arbitrary code via unspecified requests to the HTTP service.

Recommendations For Rumpus versions 5.1 and earlier, update to a version later than 5.1 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2007-0019

Produtos afetados

Rumpus

Referências · 7

• 🔥 http://projects.info-pull.com/moab/MOAB-18-01-2007.html · Exploit
• 🔥 https://exploit-db.com/exploits/3156 · Exploit
• http://secunia.com/advisories/23842 · Nota
• http://osvdb.org/32692 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31594 · Nota
• http://osvdb.org/32689 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0019 · Nota de Segurança