CVE-2007-0019

Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote authenticated users to execute arbitrary code via a long LIST command and other unspecified requests to the FTP service, and (2) allow remote attackers to execute arbitrary code via unspecified requests to the HTTP service.

Score

CVSS 2.0 6.5 Medium

Status

Modified - cve@mitre.org

Published

2007-01-19

Last modified

2024-08-07

Affected products

• Rumpus Ftp Server (Maxum Development Corporation)

References

• http://osvdb.org/32689
• http://osvdb.org/32692
• http://projects.info-pull.com/moab/MOAB-18-01-2007.html
• http://secunia.com/advisories/23842
• https://exchange.xforce.ibmcloud.com/vulnerabilities/31594