Dissecting CVE-2015-3306: ProFTPD mod_copy Arbitrary File Copy to Remote Code Execution
Dissecting CVE-2015-3306: ProFTPD mod_copy Arbitrary File Copy to Remote Code Execution Vulnerability Overview Field Value CVE ID CVE-2015-3306 Score (CVSS) 10 Affected component mod_copy module of ProFTPD Vulnerability type Remote Code Execution (RCE) Impact if exploited Privilege escalation and ultimately full control of the server Prior Public Analyses Description Publish date Analyst https://lists.debian.org/debian-security-announce/2015/msg00154.html 2015-05-19 Vadim Melihow https://www.exploit-db.com/exploits/49908 2021-05-26 Shellbr3ak https://www.exploit-db.com/exploits/37262 2015-06-10 Metasploit https://www.exploit-db.com/exploits/36803 2015-04-21 R-73eN Introduction This document provides an in-depth analysis of a critical vulnerability in the mod_copy module of the well-known FTP server ProFTPD. This Remote Code Execution vulnerability allows attackers to bypass authentication mechanisms and access restrictions, giving them read/write access to sensitive operating system files (such as /etc/passwd and /etc/shadow), or even allowing them to drop malicious code into web-accessible paths (such as /var/www/html). ...