Unverified50% confidenceFactExact time
The access control flaw in ProFTPD allows a remote attacker to read and write arbitrary files via the two commands site cpfr and site cpto (CWE-284), and a fixing patch has existed since 2015.
1
Sources
50%
Confidence
Long-term
Relevance
10/15/2026
First Seen
Sources
Related Entities
Related Claims
VerifiedCVE-2019-5736 (the runc vulnerability) allows a malicious container to overwrite the runc binary on the host machine, achieving container escape.69% similarUnverifiedv2.1.292 fixes a security issue where the PreToolUse hook approval and auto mode could bypass permission prompts when reading files from network (UNC) paths.67% similarUnverifiedCVE-2020-9906 is a remotely exploitable memory corruption vulnerability that allows an attacker within physical proximity to achieve code execution without any user interaction.65% similarUnverifiedPantsdown（CVE-2019-6260）漏洞允许通过网络未经认证直接读写BMC物理内存65% similarUnverifiedSSRF利用中常被检测的危险协议包括file://（读取本地文件）、dict://（探测端口开放状态）、ftp://（有时可绕过过滤）65% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1036323API
curl https://kongchang.com/api/v1/knowledge/claims/1036323MCP
get_claim(id=1036323)