Path traversal

An issue was discovered in Maxum Rumpus before 8.2.12 on macOS. Authenticated users can perform a path traversal using double escaped characters, enabling read access to arbitrary files on the server...

CVE-2020-12737

CVE-2020-12737 affects Maxum Rumpus on macOS prior to version 8.2.12. The issue is a path traversal vulnerability where authenticated users can use double-escaped characters to read arbitrary files on the server. Impact is read access to sensitive files; no other compromises are specified. Remedi...

CVE-2020-12737

An issue was discovered in Maxum Rumpus before 8.2.12 on macOS. Authenticated users can perform a path traversal using double escaped characters, enabling read access to arbitrary files on the server...

CVE-2020-12737: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Maxum Rumpus before 8.2.12 on macOS. Authenticated users can perform a path traversal using double escaped characters, enabling read access to arbitrary files on the server...

Maxum Rumpus Cross-Site Scripting Vulnerability

Maxum Rumpus is an FTP and Web file transfer server. A cross-site scripting vulnerability exists in Maxum Rumpus that can be exploited by an attacker to execute client-side code...

Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting

Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting Exploit Title: Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting Google Dork: site:..com "Web File Manager" inurl:?login= Shodan Dork: Server: Rumpus Date: 2019-12-14 Exploit Author: Harshit Shukla, Sudeepto R...

Rumpus FTP Web File Manager 8.2.9.1 Cross Site Scripting

Exploit Title: Rumpus FTP Web File Manager 8.2.9.1 - Reflected Cross-Site Scripting Google Dork: site:..com "Web File Manager" inurl:?login= Shodan Dork: Server: Rumpus Date: 2019-12-14 Exploit Author: Harshit Shukla, Sudeepto Roy Vendor Homepage: https://www.maxum.com/ Tested On: Windows & Mac...

Maxum Rumpus 6.0 - Multiple Remote Buffer Overflow Vulnerabilities

No description provided by source. BLUE MOON SECURITY ADVISORY 2008-09 =================================== :Title: Two buffer overflows in Maxum Rumpus :Severity: Critical :Reporter: Blue Moon Consulting :Products: Maxum Rumpus v6.0 :Fixed in: 6.0.1 Description ----------- Rumpus turns any Mac in...

[BMSA 2008-09] Two buffer overflow vulnerabilities in Rumpus v6.0

BLUE MOON SECURITY ADVISORY 2008-09 =================================== :Title: Two buffer overflows in Maxum Rumpus :Severity: Critical :Reporter: Blue Moon Consulting :Products: Maxum Rumpus v6.0 :Fixed in: 6.0.1 Description ----------- Rumpus turns any Mac into a file transfer server. Rumpus...

Maxum Rumpus 6.0 Multiple Remote Buffer Overflow Vulnerabilities

No description provided by source. BLUE MOON SECURITY ADVISORY 2008-09 =================================== :Title: Two buffer overflows in Maxum Rumpus :Severity: Critical :Reporter: Blue Moon Consulting :Products: Maxum Rumpus v6.0 :Fixed in: 6.0.1 Description ----------- Rumpus turns any Mac in...

Maxum Rumpus 6.0 Multiple Remote Buffer Overflow Vulnerabilities

Exploit for unknown platform in category dos / poc ================================================================ Maxum Rumpus 6.0 Multiple Remote Buffer Overflow Vulnerabilities ================================================================ BLUE MOON SECURITY ADVISORY 2008-09...

BMSA-2008-09.txt

BLUE MOON SECURITY ADVISORY 2008-09 =================================== :Title: Two buffer overflows in Maxum Rumpus :Severity: Critical :Reporter: Blue Moon Consulting :Products: Maxum Rumpus v6.0 :Fixed in: 6.0.1 Description ----------- Rumpus turns any Mac into a file transfer server. Rumpus...

Maxum Rumpus 6.0 - Multiple Remote Buffer Overflow Vulnerabilities

Maxum Rumpus 6.0 - Multiple Remote Buffer Overflow Vulnerabilities BLUE MOON SECURITY ADVISORY 2008-09 =================================== :Title: Two buffer overflows in Maxum Rumpus :Severity: Critical :Reporter: Blue Moon Consulting :Products: Maxum Rumpus v6.0 :Fixed in: 6.0.1 Description...

Maxum Rumpus 6.0 - Multiple Remote Buffer Overflow Vulnerabilities

BLUE MOON SECURITY ADVISORY 2008-09 =================================== :Title: Two buffer overflows in Maxum Rumpus :Severity: Critical :Reporter: Blue Moon Consulting :Products: Maxum Rumpus v6.0 :Fixed in: 6.0.1 Description ----------- Rumpus turns any Mac into a file transfer server. Rumpus...

CVE-2001-0644

CVE-2001-0644 affects Maxum Rumpus FTP Server versions 1.3.3 and 2.0.3 dev 3, where passwords are stored in plaintext in the Rumpus User Database file located in the prefs folder. The underlying issue is insecure password storage, which could allow an attacker who can access the server filesystem...

CVE-2001-0646

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service hang by creating a directory name of a specific length...

CVE-2001-0644

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file in the prefs folder, which could allow attackers to gain privileges on the server...

CVE-2001-0646

The CVE concerns Maxum Rumpus FTP Server versions 1.3.3 and 2.0.3 dev 3. A remote attacker can cause a denial-of-service (hang) by supplying a directory name of a specific length. The available documents do not specify the underlying root cause, affected components beyond the FTP server, or concr...

CVE-2001-0646: Undefined Security Weakness

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service hang by creating a directory name of a specific length...

CVE-2001-0644: Undefined Security Weakness

Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file in the prefs folder, which could allow attackers to gain privileges on the server...