Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2015-3306
HistoryMay 18, 2015 - 3:59 p.m.

CVE-2015-3306

2015-05-1815:59:10
CWE-284
[email protected]
web.nvd.nist.gov
2210
4
20
proftpd
mod_copy
remote attack
file read
file write
cve-2015-3306

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

9.2

Confidence

High

EPSS

0.971

Percentile

99.8%

JSON

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.

Affected configurations

NVD
Node
proftpdproftpdMatch1.3.5
VendorProductVersionCPE
proftpdproftpd1.3.5cpe:/a:proftpd:proftpd:1.3.5:::

References

Social References

More

Related

nessus 9
securityvulns 2
cvelist 2
hackerone 1
debiancve 2
openvas 8
zdt 3
saint 4
debian 2
prion 2
osv 2
checkpoint_advisories 1
slackware 1
freebsd 1
nvd 2
packetstorm 5
fedora 3
ubuntucve 2
canvas 1
exploitdb 1
thn 1
cve 1
nessus
nessus
Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : proftpd (SSA:2015-111-12)
2015-04-22 00:00:00
ProFTPD mod_copy Information Disclosure
2015-06-16 00:00:00
Fedora 22 : proftpd-1.3.5-6.fc22 (2015-7164)
2015-05-04 00:00:00
securityvulns
securityvulns
ProFTPD unauthorized files access
2015-05-05 00:00:00
[slackware-security] proftpd (SSA:2015-111-12)
2015-05-05 00:00:00
cvelist
cvelist
CVE-2015-3306
2015-05-18 15:00:00
CVE-2019-12815
2019-07-19 22:56:14
hackerone
hackerone
Mail.ru: [files.ucs.ru] ProFTPd mod_copy Arbitrary Read/Write
2020-11-02 11:13:12
debiancve
debiancve
CVE-2015-3306
2015-05-18 15:59:10
CVE-2019-12815
2019-07-19 23:15:11
openvas
openvas
Fedora Update for proftpd FEDORA-2015-7164
2015-07-07 00:00:00
Debian: Security Advisory (DSA-3263-1)
2015-05-18 00:00:00
ProFTPD `mod_copy` Unauthenticated Copying Of Files Via SITE CPFR/CPTO
2015-04-13 00:00:00
zdt
zdt
ProFTPd 1.3.5 - Remote Command Execution Exploit
2015-04-21 00:00:00
ProFTPd 1.3.5 - (mod_copy) Remote Command Execution Exploit (2)
2021-05-26 00:00:00
ProFTPD 1.3.5 Mod_Copy Command Execution Exploit
2015-06-10 00:00:00
saint
saint
ProFTPD mod_copy command execution
2015-05-29 00:00:00
ProFTPD mod_copy command execution
2015-05-29 00:00:00
ProFTPD mod_copy command execution
2015-05-29 00:00:00
debian
debian
[SECURITY] [DSA 3263-1] proftpd-dfsg security update
2015-05-19 21:46:37
[SECURITY] [DSA 3263-1] proftpd-dfsg security update
2015-05-19 21:46:37
prion
prion
Cross site scripting
2015-05-18 15:59:00
Information disclosure
2019-07-19 23:15:00
osv
osv
proftpd-dfsg - security update
2015-05-19 00:00:00
CVE-2019-12815
2019-07-19 23:15:11
checkpoint_advisories
checkpoint_advisories
ProFTPD mod_copy Unauthenticated Remote File Copying (CVE-2015-3306)
2015-04-29 00:00:00
slackware
slackware
[slackware-security] proftpd
2015-04-22 01:24:15
freebsd
freebsd
proftpd -- arbitrary code execution vulnerability with chroot
2015-04-15 00:00:00
nvd
nvd
CVE-2015-3306
2015-05-18 15:59:10
CVE-2019-12815
2019-07-19 23:15:11
packetstorm
packetstorm
ProFTPd 1.3.5 Remote Command Execution
2021-05-26 00:00:00
ProFTPd 1.3.5 File Copy
2015-04-18 00:00:00
ProFTPD 1.3.5 Mod_Copy Command Execution
2015-06-10 00:00:00
fedora
fedora
[SECURITY] Fedora 21 Update: proftpd-1.3.5-5.fc21
2015-05-10 23:49:44
[SECURITY] Fedora 22 Update: proftpd-1.3.5-6.fc22
2015-05-03 17:25:10
[SECURITY] Fedora 20 Update: proftpd-1.3.4e-3.fc20
2015-05-03 17:25:18
ubuntucve
ubuntucve
CVE-2015-3306
2015-05-18 00:00:00
CVE-2019-12815
2019-07-19 00:00:00
canvas
canvas
Immunity Canvas: PROFTPD_MOD_COPY
2015-05-18 15:59:00
exploitdb
exploitdb
ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution (2)
2021-05-26 00:00:00
thn
thn
A New 'Arbitrary File Copy' Flaw Affects ProFTPD Powered FTP Servers
2019-07-23 15:47:00
cve
cve
CVE-2019-12815
2019-07-19 23:15:11

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

9.2

Confidence

High

EPSS

0.971

Percentile

99.8%

JSON
Related for CVE-2015-3306
nessus9securityvulns2cvelist2hackerone1debiancve2openvas8zdt3saint4debian2prion2osv2checkpoint_advisories1slackware1freebsd1nvd2packetstorm5fedora3ubuntucve2canvas1exploitdb1thn1cve1