1791 matches found
CVE-2015-3306
The modcopy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...
CVE-2015-3306
The modcopy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...
Cross site scripting
The modcopy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...
CVE-2015-3306
The modcopy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...
Immunity Canvas: PROFTPD_MOD_COPY
Name| proftpdmodcopy ---|--- CVE| CVE-2015-3306 Exploit Pack| CANVAS Description| ProFTPd 1.3.5 Remote File Copy Notes| CVE Name: CVE-2015-3306 VENDOR: NOTES: This exploit abuses the commands of the modcopy module in ProFTPd version=1.3.5. The SITE CPFR/CPTO commands can be used by unauthenticate...
UBUNTU-CVE-2015-3306
The modcopy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...
CVE-2015-3306
The ProFTPD version 1.3.5b and earlier are vulnerable to an improper access control flaw within the mod_copy module. Remote attackers can exploit this by using the site cpfr and site cpto commands to read and write to arbitrary files on the filesystem. Because the copy command typically runs with...
CVE-2015-3306
The modcopy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...
CVE-2015-3306
The modcopy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...
CVE-2015-3306
The modcopy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...
CVE-2015-3306
The modcopy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...
CVE-2015-3306: Improper Access Control
The modcopy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...
PT-2015-3383 · Proftpd +2 · Proftpd +2
Name of the Vulnerable Software and Affected Versions: ProFTPD versions prior to 1.3.6b ProFTPD version 1.3.7rc before 1.3.7rc2 Description: The issue is related to the incorrect handling of overly long commands in the main.c component of the ProFTPD FTP server. This can lead to a remote...
PT-2015-1244
Name of the Vulnerable Software and Affected Versions ProFTPD version 1.3.5 Description The issue allows remote attackers to read and write to arbitrary files. This is achieved via the site cpfr and site cpto commands, which are part of the mod copy module in the ProFTPD FTP server. Recommendatio...
Debian: Security Advisory (DSA-3263-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora Update for proftpd FEDORA-2015-7086
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fedora 21 : proftpd-1.3.5-5.fc21 (2015-7086)
Vadim Melihow reported a critical issue with proftpd installations that use the modcopy module's SITE CPFR/SITE CPTO commands; modcopy allows these commands to be used by unauthenticated clients Upstream report: http://bugs.proftpd.org/showbug.cgi?id=4169 Note that modcopy is not loaded/enabled b...
[SECURITY] Fedora 21 Update: proftpd-1.3.5-5.fc21
ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...
[slackware-security] proftpd (SSA:2015-111-12)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 slackware-security proftpd SSA:2015-111-12 New proftpd packages are available for Slackware 13.0, 13.1, 13.37, 14.0, 14.1, and -current to fix a security issue. Here are the details from the Slackware 14.1 ChangeLog: +--------------------------+...