PatchTheCVErumpus ftp server vulnerabilities and fixes
Recent CVEs affecting rumpus ftp server, with upgrade or downgrade steps. 6 tracked.
Also searched as: rumpusftpserver.
rumpus ftp server has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2007-01-19. Highest priority: CVE-2007-0019 (score 50/100).
- CVE-2007-0367 MEDIUM 4.6 UPGRADE Rumpus 5.1 and earlier has weak permissions for certain files and directories under /usr/local/Rumpus, includi
- CVE-2007-0366 MEDIUM 4.6 UPGRADE Untrusted search path vulnerability in Rumpus 5.1 and earlier allows local users to gain privileges via a modi
- CVE-2007-0019 MEDIUM 6.5 UPGRADE Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote authenticated users
- CVE-2001-0706 LOW 2.1 DOWNGRADE Maximum Rumpus FTP Server 2.0.3 dev and before allows an attacker to cause a denial of service (crash) via a m
- CVE-2001-0646 MEDIUM 5.0 DOWNGRADE Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service (hang) b
- CVE-2001-0644 HIGH 7.5 UPGRADE Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file
FAQ
How do I fix rumpus ftp server vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is rumpus ftp server being exploited right now?
None of the tracked rumpus ftp server CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which rumpus ftp server CVE should I patch first?
CVE-2007-0019 currently ranks highest (50/100): Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote authenticated users.