Buffer overflow in Microfocus Rumba FTP
CVE-2016-5764
Micro Focus Rumba FTP 4.X client buffer overflow makes it possible to corrupt the stack and allow arbitrary code execution. Fixed in: Rumba FTP 4.5 (HF 14668). This can only occur if a client connects to a malicious server.
Vulnerability class: Buffer Overflow
EPSS: 0.078 (94.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.8 (High). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Microfocus Rumba_ftp — versions 4.0, 4.1, 4.2
- N/a Micro Focus Rumba Ftp 4.x Before 4.5 (Hf 14668) — versions Micro Focus Rumba FTP 4.X before 4.5 (HF 14668)
Weakness classification (CWE)
References
- security@opentext.com (x_refsource_CONFIRM)
- security@opentext.com (vdb-entry, x_refsource_BID)
- security@opentext.com (exploit, x_refsource_EXPLOIT-DB)
Frequently asked questions
- What is CVE-2016-5764?
- CVE-2016-5764 is a high-severity vulnerability in Microfocus Rumba FTP, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. CVSS score: 8.8/10. Published 2016-10-27.
- How severe is CVE-2016-5764?
- High severity. CVSS v3 base score is 8.8 out of 10.