CVE-2015-3306: ProFTPD Improper Access Control Vulnerability
ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.
Other sources
The modcopy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.
— MITRE
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Discontinue use of ProFTPD if mitigations are unavailable.
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3306?
CVE-2015-3306 is classified as a high severity vulnerability due to its potential for unauthorized file access.
How do I fix CVE-2015-3306?
To fix CVE-2015-3306, upgrade ProFTPD to a version later than 1.3.5 that addresses this vulnerability.
What types of attacks are possible with CVE-2015-3306?
CVE-2015-3306 allows attackers to read and write arbitrary files on the server, which can lead to data breaches.
Which versions of ProFTPD are affected by CVE-2015-3306?
CVE-2015-3306 affects ProFTPD version 1.3.5.
How can I verify if CVE-2015-3306 is present in my installation?
You can verify CVE-2015-3306 by checking your installed version of ProFTPD and assessing the configuration for the mod_copy module.