ProFTPD 截至1.3.5b 任意文件复制 CVE-2019-12815

1
CVE-2019-12815:
截至1.3.5b的ProFTPD中mod_copy中存在任意文件复制漏洞，允许在没有身份验证的情况下远程执行代码和信息披露，这是CVE-2015-3306的相关问题。(Base Score: 9.8 CRITICAL)
https://nvd.nist.gov/vuln/detail/CVE-2019-12815

2
CVE-2015-3306:
ProFTPD 1.3.5 中的 mod_copy 模块允许远程攻击者通过 site cpfr 和 site cpto 命令读取和写入任意文件。(Base Score: N/A)
https://nvd.nist.gov/vuln/detail/CVE-2015-3306

3
ProFTPD模块mod_copy, cpfr ,cpto
http://www.proftpd.org/docs/contrib/mod_copy.html

4
Bug #4372: Ensure that mod_copy checks for for its SITE CPFR… #816
https://github.com/proftpd/proftpd/pull/816

5
CVE-2015-3306 ----> ProFTPd 1.3.5 - ‘mod_copy’ Remote Command Execution
https://www.exploit-db.com/exploits/49908

6
https://github.com/t0kx/exploit-CVE-2015-3306