Heap overflow

Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier 1 allow remote authenticated users to execute arbitrary code via a long LIST command and other unspecified requests to the FTP service, and 2 allow remote attackers to execute arbitrary code via unspecified requests to the...

Design/Logic Flaw

Rumpus 5.1 and earlier has weak permissions for certain files and directories under /usr/local/Rumpus, including the configuration file, which allows local users to have an unknown impact by creating, modifying, or deleting files...

Design/Logic Flaw

Untrusted search path vulnerability in Rumpus 5.1 and earlier allows local users to gain privileges via a modified PATH that points to a malicious ipfw program...

CVE-2007-0366

Untrusted search path vulnerability in Rumpus 5.1 and earlier allows local users to gain privileges via a modified PATH that points to a malicious ipfw program...

CVE-2007-0367

Rumpus 5.1 and earlier has weak permissions for certain files and directories under /usr/local/Rumpus, including the configuration file, which allows local users to have an unknown impact by creating, modifying, or deleting files...

CVE-2007-0366

CVE-2007-0366 affects Rumpus 5.1 and earlier. The issue is an untrusted search path vulnerability where a local user can gain privileges by a modified PATH that points to a malicious ipfw program. The vulnerability is local with low complexity and partial impact on confidentiality, integrity, and...

CVE-2007-0019

Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier 1 allow remote authenticated users to execute arbitrary code via a long LIST command and other unspecified requests to the FTP service, and 2 allow remote attackers to execute arbitrary code via unspecified requests to the...

CVE-2007-0367

The CVE-2007-0367 entry concerns Rumpus 5.1 and earlier, where weak permissions for files/directories under /usr/local/Rumpus (including the configuration file) allow local users to create, modify, or delete files, with an unknown impact. The available sources (NVD entry and related records) conf...

CVE-2007-0019

CVE-2007-0019 affects rumpusd in Rumpus 5.1 and earlier. The issue consists of multiple heap-based buffer overflows that permit remote code execution. Specifically, a long LIST command and other FTP requests can enable exploitation by remote authenticated users, and unspecified HTTP requests can ...

Rumpus 5.1 - Local Privilege Escalation Remote FTP LIST

Rumpus 5.1 - Local Privilege Escalation Remote FTP LIST !/usr/bin/ruby Copyright c Lance M. Havok Kevin Finisterre Proof of concept for issues described in MOAB-18-01-2007. require 'net/ftp' require 'socket' bugselected = ARGV0 || 0.toi targethost = ARGV1 || "localhost" targetuser = ARGV2 ||...

Rumpus 5.1 Local Privilege Escalation / Remote FTP LIST PoC Exploit

Exploit for macOS platform in category local exploits =================================================================== Rumpus 5.1 Local Privilege Escalation / Remote FTP LIST PoC Exploit =================================================================== !/usr/bin/ruby Copyright c Lance M. Hav...

Rumpus 5.1 - Local Privilege Escalation / Remote FTP LIST

!/usr/bin/ruby Copyright c Lance M. Havok Kevin Finisterre Proof of concept for issues described in MOAB-18-01-2007. require 'net/ftp' require 'socket' bugselected = ARGV0 || 0.toi targethost = ARGV1 || "localhost" targetuser = ARGV2 || "anonymous" targetpass = ARGV3 || "rumproast" def listbugo...

CVE-2001-0644

CVE-2001-0644 affects Maxum Rumpus FTP Server versions 1.3.3 and 2.0.3 dev 3, where passwords are stored in plaintext in the Rumpus User Database file located in the prefs folder. The underlying issue is insecure password storage, which could allow an attacker who can access the server filesystem...

CVE-2001-0646

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service hang by creating a directory name of a specific length...

CVE-2001-0706

Maximum Rumpus FTP Server 2.0.3 dev and before allows an attacker to cause a denial of service crash via a mkdir command that specifies a large number of sub-folders...

CVE-2001-0644

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file in the prefs folder, which could allow attackers to gain privileges on the server...

CVE-2001-0646

The CVE concerns Maxum Rumpus FTP Server versions 1.3.3 and 2.0.3 dev 3. A remote attacker can cause a denial-of-service (hang) by supplying a directory name of a specific length. The available documents do not specify the underlying root cause, affected components beyond the FTP server, or concr...

CVE-2001-0706

CVE-2001-0706 affects Maximum Rumpus FTP Server (2.0.3 and earlier). The issue is a denial-of-service (crash) trigger when an FTP mkdir command specifies a large number of sub-folders. The provided sources identify the vulnerable component and the impact but do not include a documented fix or pat...

CVE-2001-0644

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file in the prefs folder, which could allow attackers to gain privileges on the server...

CVE-2001-0646

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service hang by creating a directory name of a specific length...