NVD

Id
25172  
Name
CVE-2015-3306  
Description
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-05-18  
Modified Date
2017-01-02  
Seq
2015-3306  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
133142 25172 CVE-2015-3306 FEDORA-2015-7164  View
133143 25172 CVE-2015-3306 FEDORA-2015-6401  View
133144 25172 CVE-2015-3306 FEDORA-2015-7086  View
133145 25172 CVE-2015-3306 openSUSE-SU-2015:1031  View
133146 25172 CVE-2015-3306 http://packetstormsecurity.com/files/131505/ProFTPd-1.3.5-File-Copy.html  View
133147 25172 CVE-2015-3306 http://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execution.html  View
133148 25172 CVE-2015-3306 http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.html  View
133149 25172 CVE-2015-3306 http://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Execution.html  View
133150 25172 CVE-2015-3306 DSA-3263  View
133151 25172 CVE-2015-3306 http://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec  View
133152 25172 CVE-2015-3306 74238  View
133153 25172 CVE-2015-3306 36742  View
133154 25172 CVE-2015-3306 36803  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7407 JVNDB-2015-002727 ProFTPD の mod_copy モジュールにおける任意のファイルを読み書きされる脆弱性 ProFTPD の mod_copy モジュールには、任意のファイルを読み書きされる脆弱性が存在します。 CVE-2015-3306 80531 CVE-2015-3306 25172 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002727.html 2015-05-03 2015-05-20 View