[Bug 1462311] Re: proftpd mod_copy issue (CVE-2015-3306)

BlueT - Matthew Lien - 練喆明 bluet at ubuntu-tw.org
Wed Sep 9 04:35:42 UTC 2015

Has this been released to 14.04 LTS?

You received this bug notification because you are a member of ProFTPD
Maintainance Team, which is subscribed to proftpd-dfsg in Ubuntu.

  proftpd mod_copy issue (CVE-2015-3306)

Status in Proftpd Dfsg:
  Fix Released
Status in proftpd-dfsg package in Ubuntu:

Bug description:
  The CVE-2015-3306 problem is arround for some time now and is not fixed in 12.04 and 14.04 LTS versions.

  I also tested it with telnet.
  I can copy files without any authentication if mod_copy is enabled (mod_copy is per default enabled!)
  The module is very usefull. I would be happy if I can re enable it on my servers.

  Debian and other distributions have already fix this in their systems.

  Is there a special reason why this still not fixed on the LTS versions
  of Ubuntu?

To manage notifications about this bug go to:

More information about the Pkg-proftpd-maintainers mailing list