medium6.5Public exploit code
CVE-2007-0019
Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote authenticated users to execute arbitrary code via a long LIST comman…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Rumpus 5.1 - Local Privilege Escalation / Remote FTP LIST2007-01-19 · local · osx · Verified
Impact
Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote authenticated users to execute arbitrary code via a long LIST command and other unspecified requests to the FTP service, and (2) allow remote attackers to execute arbitrary code via unspecified requests to the HTTP service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Maxum Development Corporation | Rumpus Ftp Server | through 5.1 |
References
- NVD record
- CVE.org record
- http://osvdb.org/32689
- http://osvdb.org/32692
- http://projects.info-pull.com/moab/MOAB-18-01-2007.html
- http://secunia.com/advisories/23842
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31594
- http://osvdb.org/32689
- http://osvdb.org/32692
- http://projects.info-pull.com/moab/MOAB-18-01-2007.html
- http://secunia.com/advisories/23842
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31594