Arbitrary File Access Vulnerability in ProFTPD by ProFTPD Project
CVE-2015-3306
Currently unrated
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC🟣 EPSS 94%
What is CVE-2015-3306?
The mod_copy module in ProFTPD 1.3.5 is vulnerable to exploitation, allowing attackers to perform unauthorized read and write operations on arbitrary files. This is executed through the use of the site cpfr and site cpto commands, enabling remote users to manipulate file contents without permission. This vulnerability creates significant security risks for servers running affected versions of ProFTPD, making it essential for administrators to apply necessary security measures and updates.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.