Security Issue in Proftpd in Plesk?

[Illiminator31]

Good Morning,
as Discovered lately the Proftpd Server (which comes with Plesk) has a Mayor Security Issue which Includes the mod_copy Module (http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-3306).

Is this a Problem with the Proftpd Server from Plesk, too?.

Thanks
Illi31

 

[futureweb]

We would also be VERY interested if our Plesk Servers are vulnerable to this Security Issue ... and if yes - when a patch will be available (as this Bug is exploited in the wild)
thx
Andreas Schnederle-Wagner

 

[Illiminator31]

@furureweb:
I know for sure that Version 1.35 of the Proftpd Server (current Stable Version) is NOT Secured as Heise Online (A Big German Security Protal) has announced.
Anway you can Download a Patch fix from the Github of Proftpd here: https://github.com/proftpd/proftpd/commit/35b65aaf7219be474f621a874ec77c85d9ec794d.patch
But you have to Compile it by yourselfe.

Currently i dont know if the Patch Fix provided on Github is working with the Plesk proftpd, since the Plesk proftpd is not 100% the Original Verison you can download from the Homepage of proftpd (its adapted to the Plesk System).
So i would NOT RECCOMEND it to download and try the fix on a live System, since as i said im not sure if it is compatible with the Plesk proftpd Version

 

[futureweb]

According to my tests - it seems that Plesk proftpd is NOT vulnerable at all ...

[root@server etc]# telnet localhost 21
Trying ::1...
Connected to localhost.
Escape character is '^]'.
220 ProFTPD 1.3.5 Server (ProFTPD) [::1]
site cpfr /etc/passwd
500 'SITE CPFR' not understood

Which makes sense --> proftpd -vv doesn't show mod_copy module loaded ... so I guess we are safe ... ;-)

Andreas

 

[pleskpanel]

It doesn't look like mod_copy is shipped with the stock ProFTPD included with Plesk

 

[pleskpanel]

(this was recently addressed in a previous thread as well - http://talk.plesk.com/threads/proftpd.333059/#post-779895)

 

[Illiminator31]

@pleskpanel:
Ah ok cool. Yea sorry i used the Search Function but couldn´t locate any Thread about it. Guess i made a Mistake there