Rumpus 5.1 - Local Privilege Escalation Remote FTP LIST

Rumpus 5.1 - Local Privilege Escalation Remote FTP LIST !/usr/bin/ruby Copyright c Lance M. Havok Kevin Finisterre Proof of concept for issues described in MOAB-18-01-2007. require 'net/ftp' require 'socket' bugselected = ARGV0 || 0.toi targethost = ARGV1 || "localhost" targetuser = ARGV2 ||...

CVE-2007-0019: Undefined Security Weakness

Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier 1 allow remote authenticated users to execute arbitrary code via a long LIST command and other unspecified requests to the FTP service, and 2 allow remote attackers to execute arbitrary code via unspecified requests to the...

CVE-2007-0366: Undefined Security Weakness

Untrusted search path vulnerability in Rumpus 5.1 and earlier allows local users to gain privileges via a modified PATH that points to a malicious ipfw program...

CVE-2007-0367: Undefined Security Weakness

Rumpus 5.1 and earlier has weak permissions for certain files and directories under /usr/local/Rumpus, including the configuration file, which allows local users to have an unknown impact by creating, modifying, or deleting files...

Rumpus 5.1 - Local Privilege Escalation / Remote FTP LIST

!/usr/bin/ruby Copyright c Lance M. Havok Kevin Finisterre Proof of concept for issues described in MOAB-18-01-2007. require 'net/ftp' require 'socket' bugselected = ARGV0 || 0.toi targethost = ARGV1 || "localhost" targetuser = ARGV2 || "anonymous" targetpass = ARGV3 || "rumproast" def listbugo...

CVE-2001-0644

CVE-2001-0644 affects Maxum Rumpus FTP Server versions 1.3.3 and 2.0.3 dev 3, where passwords are stored in plaintext in the Rumpus User Database file located in the prefs folder. The underlying issue is insecure password storage, which could allow an attacker who can access the server filesystem...

CVE-2001-0646

The CVE concerns Maxum Rumpus FTP Server versions 1.3.3 and 2.0.3 dev 3. A remote attacker can cause a denial-of-service (hang) by supplying a directory name of a specific length. The available documents do not specify the underlying root cause, affected components beyond the FTP server, or concr...

CVE-2001-0706

CVE-2001-0706 affects Maximum Rumpus FTP Server (2.0.3 and earlier). The issue is a denial-of-service (crash) trigger when an FTP mkdir command specifies a large number of sub-folders. The provided sources identify the vulnerable component and the impact but do not include a documented fix or pat...

CVE-2001-0644

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file in the prefs folder, which could allow attackers to gain privileges on the server...

CVE-2001-0646

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service hang by creating a directory name of a specific length...

CVE-2001-0706

Maximum Rumpus FTP Server 2.0.3 dev and before allows an attacker to cause a denial of service crash via a mkdir command that specifies a large number of sub-folders...

CVE-2001-0646: Undefined Security Weakness

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service hang by creating a directory name of a specific length...

CVE-2001-0644: Undefined Security Weakness

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file in the prefs folder, which could allow attackers to gain privileges on the server...

CVE-2001-0706: Undefined Security Weakness

Maximum Rumpus FTP Server 2.0.3 dev and before allows an attacker to cause a denial of service crash via a mkdir command that specifies a large number of sub-folders...

CVE-2001-0644

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file in the prefs folder, which could allow attackers to gain privileges on the server...

CVE-2001-0646

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service hang by creating a directory name of a specific length...

CVE-2001-0706

Maximum Rumpus FTP Server 2.0.3 dev and before allows an attacker to cause a denial of service crash via a mkdir command that specifies a large number of sub-folders...

Rumpus FTP Server 1.3.x2.0.3 - Stack Overflow Denial of Service

Rumpus FTP Server 1.3.x2.0.3 - Stack Overflow Denial of Service source: https://www.securityfocus.com/bid/2864/info Rumpus FTP Server is an implementation for MacOS which allows file-sharing across TCP/IP connections. Rumpus FTP is prone to a denial of service. An ftp user can engage the attack b...

Rumpus FTP Server 1.3.x/2.0.3 - Stack Overflow Denial of Service

source: https://www.securityfocus.com/bid/2864/info Rumpus FTP Server is an implementation for MacOS which allows file-sharing across TCP/IP connections. Rumpus FTP is prone to a denial of service. An ftp user can engage the attack by making a directory with an unusual number of sub-folders. This...

Maxum Rumpus FTP Server 1.3.21.3.42.0.3 dev - Remote Denial of Service

Maxum Rumpus FTP Server 1.3.21.3.42.0.3 dev - Remote Denial of Service source: https://www.securityfocus.com/bid/2716/info Rumpus FTP Server is an implementation for MacOS which allows file-sharing across TCP/IP connections. It is possible to log in remotely to the server and shut down the servic...