Rumpus over FTP flaws

by Stephen Withers

Saturday, 20 January 2007

The latest Month of Apple Bugs disclosure mentions multiple vulnerabilities in Rumpus, an FTP server for Macintosh.

Featured Whitepaper

5 Best Practices for Smartphone Support

To quote from the disclosure, "rumpusd is vulnerable to different remotely exploitable heap-based buffer overflows, denial of service conditions and local privilege escalation issues. Due to the fact that Rumpus works under root privileges, successful exploitation by unprivileged users would allow a full compromise of the system."

Some of these are said to be remotely exploitable, others only locally - though they can be exploited by non-admin users.

The suggested workaround is to limit access to Rumpus from remote hosts, but "There's no workaround for some of the local privilege escalation issues".

Alternative FTP servers for Mac OS X include CrushFTP and PureFTPd Manager).{moscomment}

Tags See All Tags

Please enable JavaScript in your browser to post your comment!

< Next story in category		Previous story in the category >

	Visitors last 30 days	694,279
	Subscribers	15,210

About iTWire

iTWire and you

Featured Whitepaper

Tags See All Tags

Featured Whitepapers

	5 Best Practices for Smartphone Support Worldwide shipments of smartphones reached a high of nearly 40 million units in the third quarter of 2008, helping to grow the category by 28% from the same quarter last year.
	Legacy Tools: Not For Today’s Helpdesk Why applications like RDP, VPNs and VNC may be costing you time, money and end-user satisfaction.