CVE-2008-7078 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2008-7078
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2008-7078

Description: Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of service (segmentation fault) via a long HTTP verb in the HTTP component; and allow remote authenticated users to execute arbitrary code via a long argument to the (2) MKD, (3) XMKD, (4) RMD, and other unspecified commands in the FTP component.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/46988 http://xforce.iss.net/xforce/xfdb/46987 SAID Secunia Advisory: SA32892 MILW0RM http://www.milw0rm.com/exploits/7314 FULLDISC http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0007.html CONFIRM http://www.maxum.com/Rumpus/News601.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/498786/100/0/threaded BID 32558 32560

Return to the previous page.