CVE-2008-7078 Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of service (segmentation fault) via a long HTTP verb in the HTTP component; and allow remote authenticated...
HighCVSS 9.0
EPSS 7.1%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of service (segmentation fault) via a long HTTP verb in the HTTP component; and allow remote authenticated users to execute arbitrary code via a long argument to the (2) MKD, (3) XMKD, (4) RMD, and other unspecified commands in the FTP component.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| maxum rumpus | <= 6.0 | No fix listed |
References
- 20081201 [BMSA 2008-09] Two buffer overflow vulnerabilities in Rumpus v6.0 mailing-list
- 32892 third-party-advisory vendor-advisory
- www.maxum.com
- 20081201 [BMSA 2008-09] Two buffer overflow vulnerabilities in Rumpus v6.0 mailing-list
- 32558 exploit vdb-entry
- 32560 exploit vdb-entry
- rumpus-http-dos(46987) vdb-entry
- rumpus-ftp-bo(46988) vdb-entry
- 7314 exploit