CVE-2015-3306
HIGH
10,0
Source: [email protected]
Access Vector: network
Access Complexity: low
Authentication: none
Confidentiality: complete
Integrity: complete
Availability: complete
Description
AI Translation Available
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,9393
Percentile
1,0th
Updated
EPSS Score Trend (Last 75 Days)
284
Improper Access Control
IncompleteCommon Consequences
Security Scopes Affected:
Other
Potential Impacts:
Varies By Context
Applicable Platforms
Technologies:
ICS/OT, Not Technology-Specific, Web Based
Exploit
ProFTPd 1.3.5 - File Copy
VerifiedProFTPd 1.3.5 - File Copy
View Exploit Code →
Exploit
ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution
ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution
View Exploit Code →
Exploit
ProFTPd 1.3.5 - 'mod_copy' Command Execution (Metasploit)
Verified Metasploit Framework (MSF)ProFTPd 1.3.5 - 'mod_copy' Command Execution (Metasploit)
View Exploit Code →
Exploit
ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution (2)
VerifiedProFTPd 1.3.5 - 'mod_copy' Remote Command Execution (2)
View Exploit Code →
Application
Proftpd by Proftpd
CPE Identifier
View Detailed Analysis
cpe:2.3:a:proftpd:proftpd:1.3.5:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157581.html
http://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html
http://packetstormsecurity.com/files/131505/ProFTPd-1.3.5-File-Copy.html
http://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execut…
http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.…
http://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Exec…
http://packetstormsecurity.com/files/162777/ProFTPd-1.3.5-Remote-Command-Execut…
https://www.exploit-db.com/exploits/36742/
https://www.exploit-db.com/exploits/36803/
http://www.debian.org/security/2015/dsa-3263
http://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec
http://www.securityfocus.com/bid/74238
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157581.html
http://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html
http://packetstormsecurity.com/files/131505/ProFTPd-1.3.5-File-Copy.html
http://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execut…
http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.…
http://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Exec…
http://packetstormsecurity.com/files/162777/ProFTPd-1.3.5-Remote-Command-Execut…
https://www.exploit-db.com/exploits/36742/
https://www.exploit-db.com/exploits/36803/
http://www.debian.org/security/2015/dsa-3263
http://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec
http://www.securityfocus.com/bid/74238