CVE-2012-6095

CVE-2012-6095 describes a race condition vulnerability in ProFTPD versions prior to 1.3.5rc1, specifically when the UserOwner directive is enabled. A local attacker can exploit this flaw via symlink attacks on the MKD or XMKD commands to modify the ownership of arbitrary files. With a CVSS score of 1.2, this vulnerability has low severity, requiring local access and high attack complexity, with a potential impact limited to partial integrity compromise. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.