Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the Rumpus User Database file in the prefs folder, which could allow attackers to gain privileges on the server.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rumpus_ftp_server | Maxum_development_corporation | * | 2.0.3_dev_3 (including) |
| Rumpus_ftp_server | Maxum_development_corporation | 1.3.2 (including) | 1.3.2 (including) |
| Rumpus_ftp_server | Maxum_development_corporation | 1.3.3 (including) | 1.3.3 (including) |
| Rumpus_ftp_server | Maxum_development_corporation | 1.3.4 (including) | 1.3.4 (including) |