Unscored severity · published Aug 25, 2009
CVE-2008-7078
Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of service (segmentation fault) via a long HTTP verb in the HTTP component; and allow…
–
CVSS
7.1%
EPSS
No
On KEV
Description
Multiple buffer overflows in Rumpus before 6.0.1 allow remote attackers to (1) cause a denial of service (segmentation fault) via a long HTTP verb in the HTTP component; and allow remote authenticated users to execute arbitrary code via a long argument to the (2) MKD, (3) XMKD, (4) RMD, and other unspecified commands in the FTP component.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.1% · higher than 94% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RU
Rumpus · Maxum
through 6.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-7078
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-7078
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2008-12/0007.html
Vendor Advisory
http://secunia.com/advisories/32892
www.maxum.com
http://www.maxum.com/Rumpus/News601.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/498786/100/0/threaded
Exploit
http://www.securityfocus.com/bid/32558
Exploit
http://www.securityfocus.com/bid/32560
More from Rumpus
9.8
CVE-2025-55058
CWE-20 Improper Input Validation
9.8
CVE-2025-55055
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
8.8
CVE-2025-55057
Multiple CWE-352 Cross-Site Request Forgery (CSRF)
8.8
CVE-2022-46368
Rumpus - FTP server version 9.0.7.1 Cross-site request forgery (CSRF) – vulnerability may allow unauthorized action on behalf of authenticated users
8.8
CVE-2022-46367
Rumpus - FTP server Cross-site request forgery (CSRF) – Privilege escalation vulnerability that may allow privilege escalation