{"metadata": {"vulnerability": "cve-2019-12815", "count": 58, "kinds": {"milestone": 11, "sighting": 11, "kev": 0, "other": 36}}, "data": [{"timestamp": "2019-06-13T00:00:00Z", "date_only": false, "value": "2019-06-13T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "cve-2019-12815", "field": "cveMetadata.dateReserved"}, {"timestamp": "2019-07-19T22:56:14Z", "date_only": false, "value": "2019-07-19T22:56:14.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "cve-2019-12815", "field": "cveMetadata.datePublished"}, {"timestamp": "2019-07-19T23:15:00Z", "date_only": false, "value": "2019-07-19T23:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-F989-XW5V-4W5P", "record": "GHSA-F989-XW5V-4W5P", "field": "database_specific.nvd_published_at"}, {"timestamp": "2019-07-19T23:15:00Z", "date_only": false, "value": "2019-07-19T23:15:00Z", "kind": "milestone", "label": "Published", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2019-12815", "record": "UBUNTU-CVE-2019-12815", "field": "published"}, {"timestamp": "2019-07-19T23:15:00Z", "date_only": false, "value": "2019-07-19T23:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2019-12815", "record": "GSD-2019-12815", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2019-07-19T23:15:11.030Z", "date_only": false, "value": "2019-07-19T23:15:11.030", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-12815", "record": "FKIE_CVE-2019-12815", "field": "published"}, {"timestamp": "2019-07-23T02:13:13Z", "date_only": false, "value": "2019-07-23T02:13:13.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/information_security_channel/29576", "record": "CVE-2019-12815", "field": "creation_timestamp", "uuid": "0a0b2d48-b2c8-4094-9737-7498db6669d3", "content": "File copy vulnerability in ProFTPD server allows an anonymous remote attacker to execute the code in vulnerable machine results in remote code execution and information disclosure without authentication. By exploiting the vulnerability attacker can run any program code with the rights of the Pro-FTPd service. The vulnerability can be tracked as CVE-2019-12815 and it affects [\u2026]\nThe post File Copy Vulnerability With ProFTPD puts Over 1 Million Servers at Risk (https://gbhackers.com/proftpd-file-copy-vulnerability/) appeared first on GBHackers On Security (https://gbhackers.com/).", "url": "https://t.me/information_security_channel/29576"}, {"timestamp": "2019-07-23T16:25:00Z", "date_only": false, "value": "2019-07-23T16:25:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/sysodmins/5616", "record": "CVE-2019-12815", "field": "creation_timestamp", "uuid": "f76d2b83-c419-4ede-bfa3-ab3873b91fb9", "content": "\u200b\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ProFTPD \u0441\u0442\u0430\u0432\u0438\u0442 \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u043a\u0438\u0431\u0435\u0440\u0430\u0442\u0430\u043a \u0431\u043e\u043b\u0435\u0435 \u043c\u0438\u043b\u043b\u0438\u043e\u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442\u0430\u043c \u043f\u043e\u0438\u0441\u043a\u0430 Shodan, \u043d\u0430 \u0434\u0430\u043d\u043d\u044b\u0439 \u043c\u043e\u043c\u0435\u043d\u0442 \u0432 \u0441\u0435\u0442\u0438 \u043d\u0430\u0441\u0447\u0438\u0442\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u0431\u043e\u043b\u0435\u0435 1 \u043c\u043b\u043d \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 ProFTPd. https://www.shodan.io/search?query=ProFTPD\n\n\u0412 \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043e\u0441\u0442\u0430\u0435\u0442\u0441\u044f \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u043e\u0439. \u0412 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0431\u0445\u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0443\u0442\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0441\u0435\u0440\u0432\u0435\u0440\u043e\u0432 \u043c\u043e\u0433\u0443\u0442 \u043e\u0442\u043a\u043b\u044e\u0447\u0438\u0442\u044c \u043c\u043e\u0434\u0443\u043b\u044c \"mod_copy\" \u0432 \u0444\u0430\u0439\u043b\u0435 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 ProFTPd, \u0447\u0442\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u0438\u0442\u044c \u0441\u0435\u0431\u044f \u043e\u0442 \u043b\u044e\u0431\u044b\u0445 \u0430\u0442\u0430\u043a, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u044d\u0442\u0438\u043c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u043e\u043c.\n\n\u0412 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u043d\u043e\u043c \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0435\u043d\u0438\u0438 ProFTPD \u0434\u043b\u044f Linux \u0438 UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0435\u0437 \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u0441\u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u0444\u0430\u0439\u043b \u043d\u0430 FTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0435.\n\nProFTPd \u2014 \u043a\u0440\u043e\u0441\u0441\u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0435\u043d\u043d\u044b\u0439 FTP-\u0441\u0435\u0440\u0432\u0435\u0440 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u044e\u0449\u0438\u0439 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u043e UNIX-\u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0445 \u0441\u0438\u0441\u0442\u0435\u043c \u0438 Windows. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u0432\u0441\u0435 \u0432\u0435\u0440\u0441\u0438\u0438 ProFTPd \u0432\u043f\u043b\u043e\u0442\u044c \u0434\u043e 1.3.6.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-12815 https://www.cert-bund.de/advisoryshort/CB-K19-0642) \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 \"mod_copy\", \u043f\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u043c\u0441\u044f \u0432 \u0434\u0435\u0444\u043e\u043b\u0442\u043d\u043e\u0439 \u0441\u0431\u043e\u0440\u043a\u0435 ProFTPd \u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043d\u043e\u043c \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0435 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432 (\u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, Debian). \u041f\u0435\u0440\u0435\u0434\u0430\u0447\u0430 \u043a\u043e\u043c\u0430\u043d\u0434 CPFR, CPTO \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440 ProFTPd \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c \u0431\u0435\u0437 \u043f\u0440\u0430\u0432\u0430 \u043d\u0430 \u0437\u0430\u043f\u0438\u0441\u044c \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043b\u044e\u0431\u044b\u0435 \u0444\u0430\u0439\u043b\u044b \u043d\u0430 FTP-\u0441\u0435\u0440\u0432\u0435\u0440\u0435. \u0411\u0430\u0433 \u0441\u0432\u044f\u0437\u0430\u043d \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e 2015 \u0433\u043e\u0434\u0430 (CVE-2015-3306), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u043b\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0447\u0438\u0442\u0430\u0442\u044c \u0438 \u0437\u0430\u043f\u0438\u0441\u044b\u0432\u0430\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0435 \u0444\u0430\u0439\u043b\u044b, \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044f \u043a\u043e\u043c\u0430\u043d\u0434\u044b SITE CPFR \u0438 SITE CPTO.", "url": "https://t.me/sysodmins/5616"}, {"timestamp": "2019-07-23T17:52:29Z", "date_only": false, "value": "2019-07-23T17:52:29.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/thehackernews/391", "record": "CVE-2019-12815", "field": "creation_timestamp", "uuid": "30caee8d-7486-4834-b6ec-46580d12dd19", "content": "Severe RCE vulnerability (CVE-2019-12815) disclosed in the popular ProFTPD (FTP server) \u2014 affecting over 1 million servers\n\nRead \u27a4 https://thehackernews.com/2019/07/linux-ftp-server-security.html", "url": "https://t.me/thehackernews/391"}, {"timestamp": "2019-07-23T21:48:20Z", "date_only": false, "value": "2019-07-23T21:48:20.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tech_b0lt_Genona/786", "record": "CVE-2019-12815", "field": "creation_timestamp", "uuid": "720b4721-e4cd-4f27-9cd7-8a6693c69139", "content": "\u0422\u0443\u0442 \u0432 ProFTPD \u043d\u0430\u0448\u043b\u0438 \u0434\u044b\u0440\u0435\u043d\u044c\nAn arbitrary file copy vulnerability in mod_copy in ProFTPD up to 1.3.5b allows for remote code execution and information disclosure without authentication, a related issue to CVE-2015-3306.\n\nhttps://nvd.nist.gov/vuln/detail/CVE-2019-12815\n\n\u0410 \u0438\u0445 \u043c\u0438\u043b\u043b\u0438\u043e\u043d \u0432 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442 \u0442\u043e\u0440\u0447\u0438\u0442 \u0433\u043e\u043b\u044b\u043c\u0438 \u043f\u043e\u0440\u0442\u0430\u043c\u0438\nhttps://www.shodan.io/search?query=ProFTPD", "url": "https://t.me/tech_b0lt_Genona/786"}, {"timestamp": "2019-07-23T21:52:18Z", "date_only": false, "value": "2019-07-23T21:52:18.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/tech_b0lt_Genona/787", "record": "CVE-2019-12815", "field": "creation_timestamp", "uuid": "d3f663a1-cdd0-4d34-9158-04b509003ec5", "content": "\u0412 ftp-\u0441\u0435\u0440\u0432\u0435\u0440\u0435 ProFTPD \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043e\u043f\u0430\u0441\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2019-12815), \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u043a\u043e\u043f\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u0444\u0430\u0439\u043b\u044b \u0432 \u043f\u0440\u0435\u0434\u0435\u043b\u0430\u0445 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 \u0431\u0435\u0437 \u043f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u043a\u043e\u043c\u0430\u043d\u0434 \"site cpfr\" \u0438 \"site cpto\". \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u043f\u0440\u0438\u0441\u0432\u043e\u0435\u043d \u0443\u0440\u043e\u0432\u0435\u043d\u044c \u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 9.8 \u0438\u0437 10, \u0442\u0430\u043a \u043a\u0430\u043a \u043e\u043d\u0430 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u043c\u0435\u0440\u044f\u0442\u044c\u0441\u044f \u0434\u043b\u044f \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0438 \u0430\u043d\u043e\u043d\u0438\u043c\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043a FTP.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0437\u0432\u0430\u043d\u0430 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u0439 \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u0447\u0442\u0435\u043d\u0438\u0435 \u0438 \u0437\u0430\u043f\u0438\u0441\u044c \u0434\u0430\u043d\u043d\u044b\u0445 (Limit READ \u0438 Limit WRITE) \u0432 \u043c\u043e\u0434\u0443\u043b\u0435 mod_copy, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u0442\u0441\u044f \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0438 \u0432\u043a\u043b\u044e\u0447\u0451\u043d \u0432 \u043f\u0430\u043a\u0435\u0442\u0430\u0445 proftpd \u0434\u043b\u044f \u0431\u043e\u043b\u044c\u0448\u0438\u043d\u0441\u0442\u0432\u0430 \u0434\u0438\u0441\u0442\u0440\u0438\u0431\u0443\u0442\u0438\u0432\u043e\u0432. \u041f\u0440\u0438\u043c\u0435\u0447\u0430\u0442\u0435\u043b\u044c\u043d\u043e, \u0447\u0442\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u044f\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435\u043c \u043d\u0435 \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0443\u0441\u0442\u0440\u0430\u043d\u0451\u043d\u043d\u043e\u0439 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e\u0439 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u043e\u0439 \u0432 2015 \u0433\u043e\u0434\u0443, \u0434\u043b\u044f \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0442\u0435\u043f\u0435\u0440\u044c \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u043d\u043e\u0432\u044b\u0435 \u0432\u0435\u043a\u0442\u043e\u0440\u044b \u0434\u043b\u044f \u0430\u0442\u0430\u043a\u0438. \u0411\u043e\u043b\u0435\u0435 \u0442\u043e\u0433\u043e, \u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0435 \u0431\u044b\u043b\u043e \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u043e \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c \u0435\u0449\u0451 \u0432 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u0435 \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e \u0433\u043e\u0434\u0430, \u043d\u043e \u043f\u0430\u0442\u0447 \u0431\u044b\u043b \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u043b\u0435\u043d \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0434\u043d\u0435\u0439 \u043d\u0430\u0437\u0430\u0434.\n\n\u041a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 ProFTPd\nwww.opennet.ru/opennews/art.shtml?num=51158", "url": "https://t.me/tech_b0lt_Genona/787"}, {"timestamp": "2019-07-24T00:00:00Z", "date_only": true, "value": "2019-07-24", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2019-24009", "record": "CNVD-2019-24009", "field": "openTime"}, {"timestamp": "2019-07-24T00:00:00Z", "date_only": true, "value": "2019-07-24", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2019-24009", "record": "CNVD-2019-24009", "field": "submitTime"}, {"timestamp": "2019-08-08T09:05:33Z", "date_only": false, "value": "2019-08-08T09:05:33Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2019:1836-1", "record": "OPENSUSE-SU-2019:1836-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2019-08-08T09:05:33Z", "date_only": false, "value": "2019-08-08T09:05:33Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2019:1836-1", "record": "OPENSUSE-SU-2019:1836-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2019-08-08T09:05:33Z", "date_only": false, "value": "2019-08-08T09:05:33Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2019:1836-1", "record": "OPENSUSE-SU-2019:1836-1", "field": "document.tracking.generator.date"}, {"timestamp": "2019-08-08T09:05:33Z", "date_only": false, "value": "2019-08-08T09:05:33Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2019:1836-1", "record": "OPENSUSE-SU-2019:1836-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2019-08-14T05:59:02Z", "date_only": false, "value": "2019-08-14T05:59:02Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2019:1870-1", "record": "OPENSUSE-SU-2019:1870-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2019-08-14T05:59:02Z", "date_only": false, "value": "2019-08-14T05:59:02Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2019:1870-1", "record": "OPENSUSE-SU-2019:1870-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2019-08-14T05:59:02Z", "date_only": false, "value": "2019-08-14T05:59:02Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2019:1870-1", "record": "OPENSUSE-SU-2019:1870-1", "field": "document.tracking.generator.date"}, {"timestamp": "2019-08-14T05:59:02Z", "date_only": false, "value": "2019-08-14T05:59:02Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2019:1870-1", "record": "OPENSUSE-SU-2019:1870-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2020-01-13T15:20:23Z", "date_only": false, "value": "2020-01-13T15:20:23Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2020:0031-1", "record": "OPENSUSE-SU-2020:0031-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2020-01-13T15:20:23Z", "date_only": false, "value": "2020-01-13T15:20:23Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2020:0031-1", "record": "OPENSUSE-SU-2020:0031-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2020-01-13T15:20:23Z", "date_only": false, "value": "2020-01-13T15:20:23Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2020:0031-1", "record": "OPENSUSE-SU-2020:0031-1", "field": "document.tracking.generator.date"}, {"timestamp": "2020-01-13T15:20:23Z", "date_only": false, "value": "2020-01-13T15:20:23Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2020:0031-1", "record": "OPENSUSE-SU-2020:0031-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2020-02-11T00:00:00Z", "date_only": false, "value": "2020-02-11T00:00:00.000000Z", "kind": "other", "label": "Advisory revision", "source": "csaf_cisa \u00b7 ICSA-20-042-03", "record": "ICSA-20-042-03", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2020-02-11T00:00:00Z", "date_only": false, "value": "2020-02-11T00:00:00.000000Z", "kind": "milestone", "label": "Published", "source": "csaf_cisa \u00b7 ICSA-20-042-03", "record": "ICSA-20-042-03", "field": "document.tracking.initial_release_date"}, {"timestamp": "2020-02-11T00:00:00Z", "date_only": false, "value": "2020-02-11T00:00:00.000000Z", "kind": "other", "label": "Updated", "source": "csaf_cisa \u00b7 ICSA-20-042-03", "record": "ICSA-20-042-03", "field": "document.tracking.current_release_date"}, {"timestamp": "2020-02-11T10:06:15Z", "date_only": false, "value": "2020-02-11T10:06:15.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / mitre", "record": "cve-2019-12815", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2020-02-13T00:00:00Z", "date_only": false, "value": "2020-02-13T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-090", "record": "CERTFR-2020-AVI-090", "field": "last_revision_date"}, {"timestamp": "2020-02-13T00:00:00Z", "date_only": false, "value": "2020-02-13T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-090", "record": "CERTFR-2020-AVI-090", "field": "initial_release_date"}, {"timestamp": "2020-02-13T00:00:00Z", "date_only": false, "value": "2020-02-13T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2020-AVI-090", "record": "CERTFR-2020-AVI-090", "field": "revisions.0.revision_date"}, {"timestamp": "2022-02-18T16:23:37Z", "date_only": false, "value": "2022-02-18T16:23:37.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cyberden_team/354", "record": "CVE-2019-12815", "field": "creation_timestamp", "uuid": "01f0c47b-2e84-4d59-9b82-19e7503c1188", "content": "\u200b\u041f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0441\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u043e\u043c \u0434\u043b\u044f \u0441\u043a\u0430\u043d\u0430 \u043f\u043e\u0440\u0442\u043e\u0432 \u0438 \u043f\u043e\u0438\u0441\u043a\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439\n\nnrich \u2014 \u043d\u043e\u0432\u044b\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u043e\u0442 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 Shodan \u0434\u043b\u044f \u0431\u044b\u0441\u0442\u0440\u043e\u0433\u043e \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u043f\u0438\u0441\u043a\u0430 IP-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0438 \u043f\u0440\u043e\u0441\u043c\u043e\u0442\u0440\u0430 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a\u0438\u0435 \u0438\u0437 \u043d\u0438\u0445 \u0438\u043c\u0435\u044e\u0442 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u0435 \u043f\u043e\u0440\u0442\u044b/\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\n\u0423\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430\n\n$ wget https://gitlab.com/api/v4/projects/33695681/packages/generic/nrich/latest/nrich_latest_amd64.deb\n$ sudo dpkg -i nrich_latest_amd64.deb\n\n\u0414\u043b\u044f \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0431\u044b \u0443\u0431\u0435\u0434\u0438\u0442\u0441\u044f \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u043e\u043d \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442, \u043c\u043e\u0436\u043d\u043e \u043d\u0430\u043f\u0438\u0441\u0430\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u0443 echo \u0438 \u0430\u0434\u0440\u0435\u0441. \u041a \u043f\u0440\u0438\u043c\u0435\u0440\u0443:\n\n$ echo 149.202.182.140 | nrich -\n\n\u0414\u0430\u043b\u0435\u0435 \u043c\u044b \u0432\u0438\u0434\u0438\u043c \u0440\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442: \n\n149.202.182.140 (ftptech1.pcsoft.fr)\n  Ports: 21, 80, 111, 443\n  CPEs: cpe:/a:proftpd:proftpd:1.3.5b, cpe:/a:apache:http_server:2.4.25\n  Vulnerabilities: CVE-2018-11763, CVE-2019-0220, CVE-2017-15710, CVE-2018-1312, CVE-2019-0197, CVE-2017-9798, CVE-2018-1283, CVE-2017-7668, CVE-2017-3169, CVE-2017-15715, CVE-2017-7659, CVE-2018-1333, CVE-2019-0211, CVE-2019-12815, CVE-2017-3167, CVE-2017-9788, CVE-2019-0196, CVE-2017-7679, CVE-2018-17199\n\n\u0418\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\n\n$ nrich --help \n\n\u0414\u0430\u043b\u0435\u0435 \u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u0441\u044f \u0441\u043f\u0438\u0441\u043a\u043e\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u0438\u0441\u0445\u043e\u0434\u044f \u0438\u0437 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u044f", "url": "https://t.me/cyberden_team/354"}, {"timestamp": "2022-05-24T16:50:47Z", "date_only": false, "value": "2022-05-24T16:50:47Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-F989-XW5V-4W5P", "record": "GHSA-F989-XW5V-4W5P", "field": "published"}, {"timestamp": "2023-03-01T16:39:00Z", "date_only": false, "value": "2023-03-01T16:39Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2019-12815", "record": "GSD-2019-12815", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2023-12-13T01:23:43.871Z", "date_only": false, "value": "2023-12-13T01:23:43.871365Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2019-12815", "record": "GSD-2019-12815", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-05-06T10:32:27Z", "date_only": false, "value": "2024-05-06T10:32:27.000000Z", "kind": "sighting", "label": "Published proof of concept", "source": "https://t.me/CyberSecurityTechnologies/315", "record": "CVE-2019-12815", "field": "creation_timestamp", "uuid": "2284489b-01e6-4f59-9a2f-5a428073aab8", "content": "#exploit\n1. CVE-2019-12815:\nProFTPd - mod_copy Incorrect Access Control\nhttps://tbspace.de/cve201912815proftpd.html\n\n2. CVE-2019-6487:\nCI vulnerability in TP-Link WDR5620\nhttps://github.com/afang5472/TP-Link-WDR-Router-Command-injection_POC/blob/master/poc.py", "url": "https://t.me/CyberSecurityTechnologies/315"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11196-1", "record": "OPENSUSE-SU-2024:11196-1", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Date", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11196-1", "record": "OPENSUSE-SU-2024:11196-1", "field": "vulnerabilities.0.threats.0.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "other", "label": "Document generated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11196-1", "record": "OPENSUSE-SU-2024:11196-1", "field": "document.tracking.generator.date"}, {"timestamp": "2024-06-15T00:00:00Z", "date_only": false, "value": "2024-06-15T00:00:00Z", "kind": "milestone", "label": "Published", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11196-1", "record": "OPENSUSE-SU-2024:11196-1", "field": "document.tracking.initial_release_date"}, {"timestamp": "2025-11-04T16:09:12.220Z", "date_only": false, "value": "2025-11-04T16:09:12.220Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "cve-2019-12815", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-04T16:09:12.220Z", "date_only": false, "value": "2025-11-04T16:09:12.220Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "cve-2019-12815", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-04T18:30:34Z", "date_only": false, "value": "2025-11-04T18:30:34Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-F989-XW5V-4W5P", "record": "GHSA-F989-XW5V-4W5P", "field": "modified"}, {"timestamp": "2026-04-22T07:39:00Z", "date_only": false, "value": "2026-04-22T07:39:00Z", "kind": "other", "label": "Updated", "source": "osv_ubuntu \u00b7 UBUNTU-CVE-2019-12815", "record": "UBUNTU-CVE-2019-12815", "field": "modified"}, {"timestamp": "2026-06-17T02:15:32.487Z", "date_only": false, "value": "2026-06-17T02:15:32.487", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2019-12815", "record": "FKIE_CVE-2019-12815", "field": "lastModified"}, {"timestamp": "2026-07-29T12:01:44.556Z", "date_only": false, "value": "2026-07-29T12:01:44.556325Z", "kind": "sighting", "label": "Seen", "source": "Telegram/oLtqzwaoqjz6WdC6mPbg8k6IRzlm7CxvpFg0bLfOXnasqQ", "record": "CVE-2019-12815", "field": "creation_timestamp", "uuid": "10a793dc-6440-45a9-a3e0-d6f6f11547f3"}, {"timestamp": "2026-07-30T00:02:01.273Z", "date_only": false, "value": "2026-07-30T00:02:01.273443Z", "kind": "sighting", "label": "Seen", "source": "Telegram/oLtqzwaoqjz6WdC6mPbg8k6IRzlm7CxvpFg0bLfOXnasqQ", "record": "CVE-2019-12815", "field": "creation_timestamp", "uuid": "a39625df-833f-4c1c-ba31-3673a70662ee"}, {"timestamp": "2026-08-01T13:00:04.930Z", "date_only": false, "value": "2026-08-01T13:00:04.930653Z", "kind": "sighting", "label": "Seen", "source": "Telegram/oLtqzwaoqjz6WdC6mPbg8k6IRzlm7CxvpFg0bLfOXnasqQ", "record": "CVE-2019-12815", "field": "creation_timestamp", "uuid": "1a06a63f-d2f1-43ed-ae45-e6a2ac11f9e7"}, {"timestamp": "2026-08-02T00:00:46.324Z", "date_only": false, "value": "2026-08-02T00:00:46.324117Z", "kind": "sighting", "label": "Seen", "source": "Telegram/oLtqzwaoqjz6WdC6mPbg8k6IRzlm7CxvpFg0bLfOXnasqQ", "record": "CVE-2019-12815", "field": "creation_timestamp", "uuid": "c2d89144-5613-4f5b-89c1-a77784326014"}, {"timestamp": "2026-09-20T18:53:15Z", "date_only": false, "value": "2026-09-20T18:53:15Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2019:1836-1", "record": "OPENSUSE-SU-2019:1836-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T18:53:15Z", "date_only": false, "value": "2026-09-20T18:53:15Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2019:1836-1", "record": "OPENSUSE-SU-2019:1836-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T18:53:32Z", "date_only": false, "value": "2026-09-20T18:53:32Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2019:1870-1", "record": "OPENSUSE-SU-2019:1870-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T18:53:32Z", "date_only": false, "value": "2026-09-20T18:53:32Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2019:1870-1", "record": "OPENSUSE-SU-2019:1870-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T19:02:14Z", "date_only": false, "value": "2026-09-20T19:02:14Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2020:0031-1", "record": "OPENSUSE-SU-2020:0031-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T19:02:14Z", "date_only": false, "value": "2026-09-20T19:02:14Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2020:0031-1", "record": "OPENSUSE-SU-2020:0031-1", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-09-20T20:13:32Z", "date_only": false, "value": "2026-09-20T20:13:32Z", "kind": "other", "label": "Advisory revision", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11196-1", "record": "OPENSUSE-SU-2024:11196-1", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2026-09-20T20:13:32Z", "date_only": false, "value": "2026-09-20T20:13:32Z", "kind": "other", "label": "Updated", "source": "csaf_opensuse \u00b7 OPENSUSE-SU-2024:11196-1", "record": "OPENSUSE-SU-2024:11196-1", "field": "document.tracking.current_release_date"}]}