Lucene search

[email protected]CVE-2007-0367

HistoryJan 19, 2007 - 9:28 p.m.

CVE-2007-0367

2007-01-1921:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-0367

rumpus

weak permissions

local users

configuration file

file manipulation

6.7 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

Rumpus 5.1 and earlier has weak permissions for certain files and directories under /usr/local/Rumpus, including the configuration file, which allows local users to have an unknown impact by creating, modifying, or deleting files.

CPENameOperatorVersion
maxum_development_corporation:rumpus_ftp_servermaxum development corporation rumpus ftp serverle5.1

CPE	Name	Operator	Version
maxum_development_corporation:rumpus_ftp_server	maxum development corporation rumpus ftp server	le	5.1

References

osvdb.org/32691

projects.info-pull.com/moab/MOAB-18-01-2007.html

secunia.com/advisories/23842

6.7 Medium

AI Score

Confidence

Low

4.6 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

0.0004 Low

EPSS

Percentile

5.2%

JSON

Related for CVE-2007-0367

prion1 securityvulns1