CVE-2019-12815
Fixed in a distro release EPSS 58%
An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306.
Products: proftpd, fedoraproject fedora, debian_linux, siemens simatic_cp_1543-1_firmware
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 10 | proftpd-dfsg | 1.3.6-4+deb10u1 |
| Debian 12 | proftpd-dfsg | 1.3.6-6 |
| Debian 13 | proftpd-dfsg | 1.3.6-6 |
| Debian 14 | proftpd-dfsg | 1.3.6-6 |
| Debian 8 | proftpd-dfsg | 1.3.5e+r1.3.5-2+deb8u3 |
| Debian 9 | proftpd-dfsg | 1.3.5b-4+deb9u1 |
| SUSE Package Hub 15 | proftpd | 1.3.5e-bp150.3.3.1 |
| SUSE Package Hub 15 | proftpd | 1.3.6b-bp151.4.6.2 |
| SUSE Package Hub 15 SP1 | proftpd | 1.3.5e-bp151.4.3.1 |
| SUSE Package Hub 15 SP1 | proftpd | 1.3.6b-bp151.4.6.2 |
| Ubuntu 16.04 LTS | proftpd-dfsg | no fix |
| Ubuntu 18.04 LTS | proftpd-dfsg | no fix |
| openSUSE Leap 15.0 | proftpd | 1.3.5e-bp150.3.3.1 |
| openSUSE Leap 15.1 | proftpd | 1.3.5e-bp150.3.3.1 |
| openSUSE Leap 15.1 | proftpd | 1.3.6b-bp151.4.6.2 |
| openSUSE Tumbleweed | proftpd | 1.3.6e-1.10 |