CVEs-PoC/2016/CVE-2016-3125.md

CVE-2016-3125

Description

The mod_tls module in ProFTPD before 1.3.5b and 1.3.6 before 1.3.6rc2 does not properly handle the TLSDHParamFile directive, which might cause a weaker than intended Diffie-Hellman (DH) key to be used and consequently allow attackers to have unspecified impact via unknown vectors.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/DButter/whitehat_public
• https://github.com/Dokukin1/Metasploitable
• https://github.com/Furious992/HW13-01
• https://github.com/Iknowmyname/Nmap-Scans-M2
• https://github.com/NikulinMS/13-01-hw
• https://github.com/Zhivarev/13-01-hw
• https://github.com/lekctut/sdb-hw-13-01
• https://github.com/mrt2h/DZ
• https://github.com/pedr0alencar/vlab-metasploitable2
• https://github.com/smabramov/Vulnerabilities-and-attacks-on-information-systems
• https://github.com/vshaliii/Funbox2-rookie
• https://github.com/zzzWTF/db-13-01