ProFTPD Remote Code Execution Bug Exposes Over 1 Million Servers

guest · Jul 22, 2019

ProFTPD Remote Code Execution Bug Exposes Over 1 Million Servers
July 22, 2019
https://www.bleepingcomputer.com/ne...execution-bug-exposes-over-1-million-servers/

More than one million ProFTPD servers are vulnerable to remote code execution and information disclosure attacks that could be triggered after successful exploitation of an arbitrary file copy vulnerability.
ProFTPd is an open-source and cross-platform FTP server with support for most UNIX-like systems and Windows, and one of the most popular ones targeting the UNIX-based platforms along with Pure-FTPd and vsftpd.

All ProFTPd versions up to and including 1.3.5b are impacted by the vulnerability which enables remote attackers to execute arbitrary code without the need to authenticate and with the user rights of the ProFTPD service after successful exploitation.
ProFTPd 1.3.6 released to patch the flaw
The security flaw tracked as CVE-2019-12815 (Debian, SUSE, Ubuntu) was identified in the mod_copy module by Tobias Mädel and it was reported to ProFTPd's security

According to ProFTPd' bug tracker, the issue was present because "the mod_copy module's custom SITE CPFR and SITE CPTO commands do not honor and configurations as expected."
Click to expand...

CERT-Bund, Germany's Computer Emergency Response Team, has also issued a security advisory today to alert ProFTPD users of this potentially critical vulnerability.
Over one million unpatched ProFTPd servers
There are more than one million unpatched ProFTPd servers at the moment according to a Shodan search, while only four appear to have already been upgraded since the fixed ProFTPd 1.3.6 version has been released.
Click to expand...

Log in or Sign up

ProFTPD Remote Code Execution Bug Exposes Over 1 Million Servers

guest Guest

Log in or Sign up

ProFTPD Remote Code Execution Bug Exposes Over 1 Million Servers

guest Guest

Useful Searches