Description
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High
Affected products
- Debian / debian_linux7.0 – 7.0
- Debian / debian_linux8.0 – 8.0
- Debian / debian_linux9.0 – 9.0
- fedoraproject / fedora20 – 20
- fedoraproject / fedora21 – 21
- fedoraproject / fedora22 – 22
- openSUSE / Tumbleweed
- proftpd / proftpd1.3.5 – 1.3.5
- SUSE / linux_enterprise_server15 – 15
- SUSE / linux_enterprise_server15 – 15
Exploits & proofs of concept
- exploit-dbProFTPd 1.3.5 - 'mod_copy' Remote Command Execution (2)by Shellbr3ak
- exploit-dbProFTPd 1.3.5 - 'mod_copy' Command Execution (Metasploit)by Metasploit
- exploit-dbProFTPd 1.3.5 - 'mod_copy' Remote Command Executionby R-73eN
- exploit-dbProFTPd 1.3.5 - File Copyby anonymous
- nucleiProFTPd - Remote Code Executionby pdteam
News coverage
- Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal AgenciesThe Hacker News · 18d ago
References
- MISChttp://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec
- EXPLOIThttps://www.exploit-db.com/exploits/36803/
- EXPLOIThttp://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execution.html
- VENDOR_ADVISORYhttp://www.debian.org/security/2015/dsa-3263
- EXPLOIThttp://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.html
- EXPLOIThttp://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Execution.html
- MAILING_LISThttp://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html
- MAILING_LISThttp://lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html
- MAILING_LISThttp://lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html
- MISChttp://www.securityfocus.com/bid/74238
- EXPLOIThttps://www.exploit-db.com/exploits/36742/
- MAILING_LISThttp://lists.fedoraproject.org/pipermail/package-announce/2015-May/157581.html
- EXPLOIThttp://packetstormsecurity.com/files/131505/ProFTPd-1.3.5-File-Copy.html
- EXPLOIThttp://packetstormsecurity.com/files/162777/ProFTPd-1.3.5-Remote-Command-Execution.html
Updated 21m ago · 8 sources