Bug#782781: proftpd-dfsg: CVE-2015-3306: unauthenticated copying of files via SITE CPFR/CPTO allowed by mod_copy

[Salvatore Bonaccorso]

Source: proftpd-dfsg
Version: 1.3.5-1
Severity: important
Tags: security upstream patch fixed-upstream

Hi,

the following vulnerability was published for proftpd-dfsg.

CVE-2015-3306[0]:
unauthenticated copying of files via SITE CPFR/CPTO allowed by mod_copy

If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2015-3306

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore