ProFTPD mod_copy SITE CPFR followed by SITE CPTO (CVE-2015-3306)

ills3c Intel&Coffee@Ills3C

•updated 2 days ago•1•0•2

Detects the SITE CPFR and SITE CPTO command sequence in ProFTPD logs, which is characteristic of exploiting the mod_copy vulnerability (CVE-2015-3306) to copy files without authentication.