Micro Focus Rumba FTP Security update

Overview

This security update is covered by:

• CVE-2016-5764 – Micro Focus Rumba  FTP 4.X client  buffer overflow makes it possible to corrupt the stack
• CVE-2016-5228 – Rumba 9.x stack buffer overflow vulnerability.
• CVE-2016-1606 – Rumba 9.4 stack buffer overflow vulnerabilities.

Affected Products

Micro Focus Rumba FTP 4.X client

Description

This security update addresses potential issues caused by a buffer overflow in Micro Focus FTP 4.X clients making it possible to corrupt the stack and allow arbitrary code execution.

Fixed in

Rumba FTP 4.5 (HF 14668)

Thanks

We would like to give special thanks to Umit Aksu (aksuumit@hotmail.com) , who discovered this vulnerability and reported it to us.