PT-2007-1515 · Maxum · Rumpus

Published 2007-01-19 · Updated 2017-07-29 · CVE-2007-0019

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Rumpus versions 5.1 and earlier

Description The issue involves multiple heap-based buffer overflows in the rumpusd component. This can be exploited by remote authenticated users through a long LIST command and other unspecified requests to the FTP service, allowing them to execute arbitrary code. Additionally, remote attackers can execute arbitrary code via unspecified requests to the HTTP service.

Recommendations For Rumpus versions 5.1 and earlier, update to a version later than 5.1 to resolve the issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2007-0019

Affected Products

Rumpus

References · 7

• 🔥 http://projects.info-pull.com/moab/MOAB-18-01-2007.html · Exploit
• 🔥 https://exploit-db.com/exploits/3156 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-0019 · Security Note
• http://secunia.com/advisories/23842 · Note
• http://osvdb.org/32692 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31594 · Note
• http://osvdb.org/32689 · Note