CVE-2019-12815 : An arbitrary file copy vulnerability in mod

An arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306.

Published 2019-07-19 23:15:11

Updated 2023-03-01 16:39:24

Source MITRE

View at NVD, CVE.org

Vulnerability category: Execute codeInformation leak

Products affected by CVE-2019-12815

Debian » Debian Linux » Version: 8.0
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 9.0
cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Matching versions
Debian » Debian Linux » Version: 10.0
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Matching versions
Siemens » Simatic Cp 1543-1 Firmware
Versions from including (>=) 2.0 and before (<) 2.2
cpe:2.3:o:siemens:simatic_cp_1543-1_firmware:*:*:*:*:*:*:*:*
Matching versions
When used together with: Siemens » Simatic Cp 1543-1 » Version: N/A
Fedoraproject » Fedora » Version: 29
cpe:2.3:o:fedoraproject:fedora:29:*:*:*:*:*:*:*
Matching versions
Fedoraproject » Fedora » Version: 30
cpe:2.3:o:fedoraproject:fedora:30:*:*:*:*:*:*:*
Matching versions
Proftpd » Proftpd
Versions up to, including, (<=) 1.3.5b
cpe:2.3:a:proftpd:proftpd:*:*:*:*:*:*:*:*
Matching versions

Threat overview for CVE-2019-12815

Top countries where our scanners detected CVE-2019-12815

Top open port discovered on systems with this issue 21

IPs affected by CVE-2019-12815 296,357

Threat actors abusing to this issue? Yes

Find out if you^* are affected by CVE-2019-12815!

^*Directly or indirectly through your vendors, service providers and 3rd parties. Powered by attack surface intelligence from SecurityScorecard.

Exploit prediction scoring system (EPSS) score for CVE-2019-12815

EPSS FAQ

93.63%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 99 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2019-12815

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P	10.0	6.4	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2019-12815

CWE-755 Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2019-12815

https://seclists.org/bugtraq/2019/Aug/3

Bugtraq: [SECURITY] [DSA 4491-1] proftpd-dfsg security update
Mailing List;Third Party Advisory
http://www.securityfocus.com/bid/109339

ProFTPD 'mod_copy' Remote Code Execution Vulnerability
Broken Link;Third Party Advisory;VDB Entry
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00004.html

[security-announce] openSUSE-SU-2019:1836-1: important: Security update
Broken Link

CVEs referencing this url
https://github.com/proftpd/proftpd/pull/816

Bug #4372: Ensure that mod_copy checks for <Limits> for its SITE CPFR… by Castaglia · Pull Request #816 · proftpd/proftpd · GitHub
Patch;Third Party Advisory
https://security.gentoo.org/glsa/201908-16

ProFTPD: Remote code execution (GLSA 201908-16) — Gentoo security
Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-940889.pdf

Third Party Advisory

CVEs referencing this url
http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00022.html

[security-announce] openSUSE-SU-2019:1870-1: important: Security update
Broken Link

CVEs referencing this url
http://bugs.proftpd.org/show_bug.cgi?id=4372

Bug 4372 – SITE CPFR/CPTO do not honor <Limit> configurations
Exploit;Issue Tracking;Patch;Vendor Advisory
https://tbspace.de/cve201912815proftpd.html

tbspace - ProFTPd CVE-2019-12815
Patch;Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OJDQ3XUYWO42TJBO53NUWDZRA35QMVEI/

[SECURITY] Fedora 30 Update: proftpd-1.3.6-21.fc30 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
http://lists.opensuse.org/opensuse-security-announce/2020-01/msg00009.html

[security-announce] openSUSE-SU-2020:0031-1: moderate: Security update f
Broken Link

CVEs referencing this url
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XM5FPBAGSIKV6YJZEPM6GPGJO5JFT7XU/

[SECURITY] Fedora 29 Update: proftpd-1.3.6-21.fc29 - package-announce - Fedora Mailing-Lists
Mailing List;Third Party Advisory
https://www.debian.org/security/2019/dsa-4491

Debian -- Security Information -- DSA-4491-1 proftpd-dfsg
Third Party Advisory
https://lists.debian.org/debian-lts-announce/2019/08/msg00006.html

[SECURITY] [DLA 1873-1] proftpd-dfsg security update
Mailing List;Third Party Advisory

Jump to