PT-2026-133454

ProFTPD through 1.3.9e and 1.3.10rc1 through 1.3.10rc4 contains a link-following vulnerability in mod copy that allows authenticated FTP users to bypass Limit WRITE restrictions via symlinks. Attackers can place a symlink in a writable directory and use SITE COPY or SITE CPTO to overwrite files i...

ROS-20250814-10

A vulnerability in the mod-copy module of the ProFTPD FTP server is related to a null pointer dereference error. Exploitation of the vulnerability could allow an attacker acting remotely to cause a denial of service...

SUSE CVE-2015-3306

The modcopy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands...

ProFTPD mod_copy Code Execution

The vulnerability of the modcopy module in the ProFTPD FTP server is related to errors during the checking of read and write access restrictions Limit READ and Limit WRITE. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system by sending commands CP...

DEBIAN-CVE-2019-12815

An arbitrary file copy vulnerability in modcopy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306...

UBUNTU-CVE-2019-12815

An arbitrary file copy vulnerability in modcopy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306...

PT-2019-2795

Name of the Vulnerable Software and Affected Versions ProFTPD versions up to 1.3.5b Description The issue is related to an arbitrary file copy vulnerability in the mod copy module of ProFTPD, allowing for remote code execution and information disclosure without authentication. This can be exploit...

ProFTPD Remote Access Information Disclosure

The vulnerability in the mod-copy module of the ProFTPD FTP server may allow a malicious actor to read and write arbitrary files using CPRF and CTPO commands...