CVE-2015-3306
Fixed in a distro release ExploitedEPSS 99%CVSS 10.0
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.
Products: fedoraproject fedora, debian_linux, opensuse tumbleweed, suse linux_enterprise_server, proftpd
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | proftpd-dfsg | 1.3.5-2 |
| Debian 13 | proftpd-dfsg | 1.3.5-2 |
| Debian 14 | proftpd-dfsg | 1.3.5-2 |
| Debian 7 | proftpd-dfsg | 1.3.4a-5+deb7u3 |
| Debian 8 | proftpd-dfsg | 1.3.5-1.1+deb8u1 |
| Ubuntu 14.04 LTS | proftpd-dfsg | 1.3.5~rc3-2.1ubuntu2.1 |
| openSUSE Tumbleweed | proftpd | 1.3.5b-2.5 |