maxum development corporation vulnerabilities

Recent CVEs affecting maxum development corporation products. 6 tracked.

maxum development corporation has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2007-01-19. Highest priority: CVE-2007-0019 (score 50/100).

• CVE-2007-0367 MEDIUM 4.6 UPGRADE Rumpus 5.1 and earlier has weak permissions for certain files and directories under /usr/local/Rumpus, includi
• CVE-2007-0366 MEDIUM 4.6 UPGRADE Untrusted search path vulnerability in Rumpus 5.1 and earlier allows local users to gain privileges via a modi
• CVE-2007-0019 MEDIUM 6.5 UPGRADE Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote authenticated users
• CVE-2001-0706 LOW 2.1 DOWNGRADE Maximum Rumpus FTP Server 2.0.3 dev and before allows an attacker to cause a denial of service (crash) via a m
• CVE-2001-0646 MEDIUM 5.0 DOWNGRADE Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 allows a remote attacker to perform a denial of service (hang) b
• CVE-2001-0644 HIGH 7.5 UPGRADE Maxum Rumpus FTP Server 1.3.3 and 2.0.3 dev 3 stores passwords in plaintext in the "Rumpus User Database" file

FAQ

How do I fix maxum development corporation vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is maxum development corporation being exploited right now?

None of the tracked maxum development corporation CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which maxum development corporation CVE should I patch first?

CVE-2007-0019 currently ranks highest (50/100): Multiple heap-based buffer overflows in rumpusd in Rumpus 5.1 and earlier (1) allow remote authenticated users.

Products

• rumpus ftp server

RSS feed for maxum development corporation · ← Back to latest CVEs