Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote authenticated users to execute arbitrary code via a long LIST command and other unspecified requests to the FTP service, and (2) allow remote attackers to execute arbitrary code via unspecified requests to the HTTP service.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Rumpus_ftp_server | Maxum_development_corporation | * | 5.1 (including) |
References
- http://osvdb.org/32689
- http://osvdb.org/32692
- http://projects.info-pull.com/moab/MOAB-18-01-2007.html
- http://secunia.com/advisories/23842
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31594
- http://osvdb.org/32689
- http://osvdb.org/32692
- http://projects.info-pull.com/moab/MOAB-18-01-2007.html
- http://secunia.com/advisories/23842
- https://exchange.xforce.ibmcloud.com/vulnerabilities/31594