CVE-2015-3306 in ProFTPD

Riassunto

di MITRE

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 15/04/2015
• Divulgazione: 18/05/2015
• Moderazione: accettato
• Voce: VDB-75436
• CPE: pronto
• CWE: CWE-284 (confermato)
• Sfruttamento: Scaricare
• CVSS: 10.0 (NVD)
• EPSS: 0.96803
• KEV: no
• Attività: molto basso
• Settore: Lawfirm, Agriculture, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-3306
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-3306
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-3306/