Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2015-3306
HistoryMay 18, 2015 - 3:59 p.m.

CVE-2015-3306

2015-05-1815:59:10
CWE-284
[email protected]
web.nvd.nist.gov
10

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

9.4

Confidence

High

EPSS

0.971

Percentile

99.8%

JSON

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.

Affected configurations

Nvd
Node
proftpdproftpdMatch1.3.5

References

Related

prion 2
openvas 8
debian 2
zdt 3
securityvulns 2
nessus 9
cvelist 2
debiancve 2
saint 4
hackerone 1
packetstorm 5
checkpoint_advisories 1
freebsd 1
slackware 1
osv 2
metasploit 1
cve 2
fedora 3
ubuntucve 2
canvas 1
exploitdb 2
thn 1
nvd 1
githubexploit 2
prion
prion
Cross site scripting
2015-05-18 15:59:00
Information disclosure
2019-07-19 23:15:00
openvas
openvas
ProFTPD `mod_copy` Unauthenticated Copying Of Files Via SITE CPFR/CPTO
2015-04-13 00:00:00
Debian: Security Advisory (DSA-3263-1)
2015-05-18 00:00:00
Fedora Update for proftpd FEDORA-2015-7164
2015-07-07 00:00:00
debian
debian
[SECURITY] [DSA 3263-1] proftpd-dfsg security update
2015-05-19 21:46:37
[SECURITY] [DSA 3263-1] proftpd-dfsg security update
2015-05-19 21:46:37
zdt
zdt
ProFTPd 1.3.5 - (mod_copy) Remote Command Execution Exploit (2)
2021-05-26 00:00:00
ProFTPd 1.3.5 - Remote Command Execution Exploit
2015-04-21 00:00:00
ProFTPD 1.3.5 Mod_Copy Command Execution Exploit
2015-06-10 00:00:00
securityvulns
securityvulns
ProFTPD unauthorized files access
2015-05-05 00:00:00
[slackware-security] proftpd (SSA:2015-111-12)
2015-05-05 00:00:00
nessus
nessus
Slackware 13.0 / 13.1 / 13.37 / 14.0 / 14.1 / current : proftpd (SSA:2015-111-12)
2015-04-22 00:00:00
ProFTPD mod_copy Information Disclosure
2015-06-16 00:00:00
Debian DSA-3263-1 : proftpd-dfsg - security update
2015-05-20 00:00:00
cvelist
cvelist
CVE-2015-3306
2015-05-18 15:00:00
CVE-2019-12815
2019-07-19 22:56:14
debiancve
debiancve
CVE-2015-3306
2015-05-18 15:59:10
CVE-2019-12815
2019-07-19 23:15:11
saint
saint
ProFTPD mod_copy command execution
2015-05-29 00:00:00
ProFTPD mod_copy command execution
2015-05-29 00:00:00
ProFTPD mod_copy command execution
2015-05-29 00:00:00
hackerone
hackerone
Mail.ru: [files.ucs.ru] ProFTPd mod_copy Arbitrary Read/Write
2020-11-02 11:13:12
packetstorm
packetstorm
ProFTPd CPFR / CPTO Proof Of Concept
2015-04-22 00:00:00
ProFTPD 1.3.5 Mod_Copy Command Execution
2015-06-10 00:00:00
ProFTPd 1.3.5 File Copy
2015-04-18 00:00:00
checkpoint_advisories
checkpoint_advisories
ProFTPD mod_copy Unauthenticated Remote File Copying (CVE-2015-3306)
2015-04-29 00:00:00
freebsd
freebsd
proftpd -- arbitrary code execution vulnerability with chroot
2015-04-15 00:00:00
slackware
slackware
[slackware-security] proftpd
2015-04-22 01:24:15
osv
osv
proftpd-dfsg - security update
2015-05-19 00:00:00
CVE-2019-12815
2019-07-19 23:15:11
metasploit
metasploit
ProFTPD 1.3.5 Mod_Copy Command Execution
2015-04-22 05:41:16
cve
cve
CVE-2015-3306
2015-05-18 15:59:10
CVE-2019-12815
2019-07-19 23:15:11
fedora
fedora
[SECURITY] Fedora 21 Update: proftpd-1.3.5-5.fc21
2015-05-10 23:49:44
[SECURITY] Fedora 22 Update: proftpd-1.3.5-6.fc22
2015-05-03 17:25:10
[SECURITY] Fedora 20 Update: proftpd-1.3.4e-3.fc20
2015-05-03 17:25:18
ubuntucve
ubuntucve
CVE-2015-3306
2015-05-18 00:00:00
CVE-2019-12815
2019-07-19 00:00:00
canvas
canvas
Immunity Canvas: PROFTPD_MOD_COPY
2015-05-18 15:59:00
exploitdb
exploitdb
ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution (2)
2021-05-26 00:00:00
ProFTPd 1.3.5 - 'mod_copy' Command Execution (Metasploit)
2015-06-10 00:00:00
thn
thn
A New 'Arbitrary File Copy' Flaw Affects ProFTPD Powered FTP Servers
2019-07-23 15:47:00
nvd
nvd
CVE-2019-12815
2019-07-19 23:15:11
githubexploit
githubexploit
Exploit for CVE-2014-4210
2022-03-19 01:54:15
Exploit for CVE-2014-4210
2022-03-19 01:54:15

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

9.4

Confidence

High

EPSS

0.971

Percentile

99.8%

JSON
Related for NVD:CVE-2015-3306
prion2openvas8debian2zdt3securityvulns2nessus9cvelist2debiancve2saint4hackerone1packetstorm5checkpoint_advisories1freebsd1slackware1osv2metasploit1cve2fedora3ubuntucve2canvas1exploitdb2thn1nvd1githubexploit2