ProFTPD mod_copy SITE CPFR/CPTO exploitation (CVE-2015-3306) on port 21

ills3c Intel&Coffee@Ills3C

•updated 2 days ago•0•0•1

Detects a sequence of FTP SITE CPFR (Copy From) followed by SITE CPTO (Copy To) commands from the same source IP and computer within 5 minutes, which can be abused to copy files on the server.