CVE - CVE-2015-3306

CVE-ID
CVE-2015-3306	Learn more at National Vulnerability Database (NVD) • Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings
Description
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
EXPLOIT-DB:36742 URL:https://www.exploit-db.com/exploits/36742/ EXPLOIT-DB:36803 URL:https://www.exploit-db.com/exploits/36803/ MISC:http://packetstormsecurity.com/files/131505/ProFTPd-1.3.5-File-Copy.html MISC:http://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execution.html MISC:http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.html MISC:http://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Execution.html MISC:http://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec DEBIAN:DSA-3263 URL:http://www.debian.org/security/2015/dsa-3263 FEDORA:FEDORA-2015-6401 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html FEDORA:FEDORA-2015-7086 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157581.html FEDORA:FEDORA-2015-7164 URL:http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html SUSE:openSUSE-SU-2015:1031 URL:http://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html BID:74238 URL:http://www.securityfocus.com/bid/74238
Assigning CNA
N/A
Date Entry Created
20150415	Disclaimer: The entry creation date may reflect when the CVE-ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20150415)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an entry on the CVE list, which standardizes names for security problems.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: cve@mitre.org