CVE-2016-5764

Published: Oct 27, 2016Modified: May 6, 2026

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Micro Focus Rumba FTP 4.X client buffer overflow makes it possible to corrupt the stack and allow arbitrary code execution. Fixed in: Rumba FTP 4.5 (HF 14668). This can only occur if a client connects to a malicious server.

Affected (6)

Products: Microfocus: Rumba Ftp

1 product

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Microfocus Rumba Ftp	Version 4.0
Microfocus Rumba Ftp	Version 4.1
Microfocus Rumba Ftp	Version 4.2
Microfocus Rumba Ftp	Version 4.3
Microfocus Rumba Ftp	Version 4.4
Microfocus Rumba Ftp	Version 4.5

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (6)

http://community.microfocus.com/microfocus/mainframe_solutions/rumba/w/knowledge_base/28731.rumba-ftp-4-x-security-update.aspx

Source: security@opentext.com

http://www.securityfocus.com/bid/93974

Source: security@opentext.com

https://www.exploit-db.com/exploits/40651/

Source: security@opentext.com

http://community.microfocus.com/microfocus/mainframe_solutions/rumba/w/knowledge_base/28731.rumba-ftp-4-x-security-update.aspx

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/93974

Source: af854a3a-2127-422b-91ae-364da2661108

https://www.exploit-db.com/exploits/40651/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.