PT-2001-1837 · Maxum · Maxum Rumpus Ftp Server

Published 2001-09-20 · Updated 2017-10-10 · CVE-2001-0644

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: Maxum Rumpus FTP Server versions 1.3.3 through 2.0.3 dev 3

Description: The issue allows attackers to gain privileges on the server because passwords are stored in plaintext in the Rumpus User Database file, located in the prefs folder.

Recommendations: For Maxum Rumpus FTP Server versions 1.3.3 through 2.0.3 dev 3, consider restricting access to the prefs folder and the Rumpus User Database file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2001-0644

Affected Products

Maxum Rumpus Ftp Server

References · 4

• 🔥 http://securityfocus.com/archive/1/184751 · Exploit
• http://securityfocus.com/bid/2718 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-0644 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6543 · Note