CVE-2015-3306
9.2 High
AI Score
Confidence
High
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.971 High
EPSS
Percentile
99.8%
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.
| CPE | Name | Operator | Version |
|---|---|---|---|
| proftpd:proftpd | proftpd | eq | 1.3.5 |
References
lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html
lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html
lists.fedoraproject.org/pipermail/package-announce/2015-May/157581.html
lists.opensuse.org/opensuse-updates/2015-06/msg00020.html
packetstormsecurity.com/files/131505/ProFTPd-1.3.5-File-Copy.html
packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execution.html
packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.html
packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Execution.html
packetstormsecurity.com/files/162777/ProFTPd-1.3.5-Remote-Command-Execution.html
www.debian.org/security/2015/dsa-3263
www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec
www.securityfocus.com/bid/74238
www.exploit-db.com/exploits/36742/
www.exploit-db.com/exploits/36803/
Social References
More
Related
9.2 High
AI Score
Confidence
High
10 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
0.971 High
EPSS
Percentile
99.8%