{"id":"CVE-2015-3306","aliases":["DEBIAN-CVE-2015-3306","DSA-3263-1","EUVD-2015-3352","GHSA-4mfj-5wr8-x32q","UBUNTU-CVE-2015-3306","openSUSE-SU-2024:10048-1"],"status":"published","title":"The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files...","description":"The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.99497,"percentile":0.99945,"model":"v2026.06.15"},"facts":{"in_kev":true,"known_exploited":true,"public_exploit":true,"fix_available":true},"cwes":["CWE-284"],"published":"2015-05-18T15:00:00Z","modified":"2026-10-12T14:20:20Z","kev":{"date_added":"2026-10-08","due_date":"2026-10-11","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware_use":"Unknown"},"exploitation":[{"source":"euvd","since":"2026-10-08"},{"source":"kev","since":"2026-10-08"}],"exploits":[{"source":"exploitdb","id":"EDB-36742","title":"ProFTPd 1.3.5 - File Copy","type":"remote","platform":"linux","date":"2015-04-13","verified":true,"url":"https://www.exploit-db.com/exploits/36742"},{"source":"exploitdb","id":"EDB-36803","title":"ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution","type":"remote","platform":"linux","date":"2015-04-21","url":"https://www.exploit-db.com/exploits/36803"},{"source":"pocgithub","id":"xyk0x/cpx_proftpd","title":"xyk0x/cpx_proftpd","date":"2015-04-21","url":"https://github.com/xyk0x/cpx_proftpd"},{"source":"metasploit","id":"exploit/unix/ftp/proftpd_modcopy_exec","title":"ProFTPD 1.3.5 Mod_Copy Command Execution","type":"exploit","platform":"Unix","date":"2015-04-22","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec"},{"source":"pocgithub","id":"nootropics/propane","title":"nootropics/propane","date":"2015-04-26","url":"https://github.com/nootropics/propane"},{"source":"exploitdb","id":"EDB-37262","title":"ProFTPd 1.3.5 - 'mod_copy' Command Execution (Metasploit)","type":"remote","platform":"linux","date":"2015-06-10","verified":true,"url":"https://www.exploit-db.com/exploits/37262"},{"source":"pocgithub","id":"t0kx/exploit-CVE-2015-3306","title":"t0kx/exploit-CVE-2015-3306","date":"2017-01-08","url":"https://github.com/t0kx/exploit-CVE-2015-3306"},{"source":"pocgithub","id":"davidtavarez/CVE-2015-3306","title":"davidtavarez/CVE-2015-3306","date":"2017-07-29","url":"https://github.com/davidtavarez/CVE-2015-3306"},{"source":"pocgithub","id":"cved-sources/cve-2015-3306","title":"cved-sources/cve-2015-3306","date":"2019-01-06","url":"https://github.com/cved-sources/cve-2015-3306"},{"source":"pocgithub","id":"hackarada/cve-2015-3306","title":"hackarada/cve-2015-3306","date":"2020-02-25","url":"https://github.com/hackarada/cve-2015-3306"},{"source":"pocgithub","id":"cdedmondson/Modified-CVE-2015-3306-Exploit","title":"cdedmondson/Modified-CVE-2015-3306-Exploit","date":"2020-05-15","url":"https://github.com/cdedmondson/Modified-CVE-2015-3306-Exploit"},{"source":"pocgithub","id":"cd6629/CVE-2015-3306-Python-PoC","title":"cd6629/CVE-2015-3306-Python-PoC","date":"2020-10-16","url":"https://github.com/cd6629/CVE-2015-3306-Python-PoC"},{"source":"pocgithub","id":"0xm4ud/ProFTPD_CVE-2015-3306","title":"0xm4ud/ProFTPD_CVE-2015-3306","date":"2021-05-16","url":"https://github.com/0xm4ud/ProFTPD_CVE-2015-3306"},{"source":"exploitdb","id":"EDB-49908","title":"ProFTPd 1.3.5 - 'mod_copy' Remote Command Execution (2)","type":"remote","platform":"linux","date":"2021-05-26","verified":true,"url":"https://www.exploit-db.com/exploits/49908"},{"source":"pocgithub","id":"jptr218/proftpd_bypass","title":"jptr218/proftpd_bypass","date":"2021-08-21","url":"https://github.com/jptr218/proftpd_bypass"},{"source":"pocgithub","id":"JoseLRC97/ProFTPd-1.3.5-mod_copy-Remote-Command-Execution","title":"JoseLRC97/ProFTPd-1.3.5-mod_copy-Remote-Command-Execution","date":"2024-04-18","url":"https://github.com/JoseLRC97/ProFTPd-1.3.5-mod_copy-Remote-Command-Execution"},{"source":"pocgithub","id":"Z3R0space/CVE-2015-3306","title":"Z3R0space/CVE-2015-3306","date":"2025-05-14","url":"https://github.com/Z3R0space/CVE-2015-3306"},{"source":"pocgithub","id":"donmedfor/CVE-2015-3306","title":"donmedfor/CVE-2015-3306","date":"2025-08-23","url":"https://github.com/donmedfor/CVE-2015-3306"},{"source":"pocgithub","id":"cybersensei-EH/hackviser_labs_CVE-2015-3306","title":"cybersensei-EH/hackviser_labs_CVE-2015-3306","date":"2025-11-02","url":"https://github.com/cybersensei-EH/hackviser_labs_CVE-2015-3306"},{"source":"pocgithub","id":"netw0rk7/CVE-2015-3306-Home-Lab","title":"netw0rk7/CVE-2015-3306-Home-Lab","date":"2025-11-17","url":"https://github.com/netw0rk7/CVE-2015-3306-Home-Lab"},{"source":"pocgithub","id":"canpilayda/proftpd-mod_copy-cve-2015-3306","title":"canpilayda/proftpd-mod_copy-cve-2015-3306","date":"2026-01-18","url":"https://github.com/canpilayda/proftpd-mod_copy-cve-2015-3306"},{"source":"pocgithub","id":"bcononugbor-source/OpenVAS-Vulnerability-Analysis-Incident-Response-Report","title":"bcononugbor-source/OpenVAS-Vulnerability-Analysis-Incident-Response-Report","date":"2026-06-03","url":"https://github.com/bcononugbor-source/OpenVAS-Vulnerability-Analysis-Incident-Response-Report"},{"source":"pocgithub","id":"diegslva/cve-2015-3306-lab","title":"diegslva/cve-2015-3306-lab","date":"2026-09-07","url":"https://github.com/diegslva/cve-2015-3306-lab"},{"source":"nuclei","id":"CVE-2015-3306","title":"ProFTPd - Remote Code Execution","type":"detection template","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/network/cves/2015/CVE-2015-3306.yaml"}],"fixes":[{"ecosystem":"Debian:12","package":"proftpd-dfsg","fixed_in":["1.3.5-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"proftpd-dfsg","fixed_in":["1.3.5-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"proftpd-dfsg","fixed_in":["1.3.5-2"],"sources":["osv"]},{"ecosystem":"Debian:7","package":"proftpd-dfsg","fixed_in":["1.3.4a-5+deb7u3"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"proftpd-dfsg","fixed_in":["1.3.5-1.1+deb8u1"],"sources":["osv"]},{"ecosystem":"Ubuntu:14.04:LTS","package":"proftpd-dfsg","fixed_in":["1.3.5~rc3-2.1ubuntu2.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"proftpd-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"proftpd-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"proftpd-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-2"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"proftpd-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.4a-5+deb7u3"}]}],"versions":["1.3.4a-4+nmu1","1.3.4a-5+deb7u1","1.3.4a-5+deb7u2"]},{"source":"osv","ecosystem":"Debian:8","package":"proftpd-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5-1.1+deb8u1"}]}],"versions":["1.3.5-1.1"]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"proftpd-dfsg","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5~rc3-2.1ubuntu2.1"}]}],"versions":["1.3.5~rc3-2","1.3.5~rc3-2.1","1.3.5~rc3-2.1ubuntu2"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"proftpd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.5b-2.5"}]}],"bundled":8}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"fedoraproject","product":"fedora"},{"vendor":"opensuse","product":"tumbleweed"},{"vendor":"proftpd","product":"proftpd"},{"vendor":"suse","product":"linux_enterprise_server"}],"references":[{"url":"http://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","web"]},{"url":"https://www.exploit-db.com/exploits/36803/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","evidence"]},{"url":"http://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execution.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry","web"]},{"url":"http://www.debian.org/security/2015/dsa-3263","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.html","tags":["x_refsource_MISC","x_transferred","Exploit","VDB Entry","web"]},{"url":"http://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Execution.html","tags":["x_refsource_MISC","x_transferred","Exploit","VDB Entry","web"]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Broken Link","Mailing List","Third Party Advisory","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Broken Link","Mailing List","Third Party Advisory","web"]},{"url":"http://www.securityfocus.com/bid/74238","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","web"]},{"url":"https://www.exploit-db.com/exploits/36742/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit","evidence"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157581.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Broken Link","Mailing List","Third Party Advisory","web"]},{"url":"http://packetstormsecurity.com/files/131505/ProFTPd-1.3.5-File-Copy.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry","web"]},{"url":"http://packetstormsecurity.com/files/162777/ProFTPd-1.3.5-Remote-Command-Execution.html","tags":["x_refsource_MISC","x_transferred","Exploit","VDB Entry","web"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3306","tags":["government-resource","US Government Resource"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3306"},{"url":"https://www.exploit-db.com/exploits/36742"},{"url":"https://www.exploit-db.com/exploits/36803"},{"url":"https://github.com/advisories/GHSA-4mfj-5wr8-x32q"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-3306","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2015-3306","tags":["report"]},{"url":"http://www.openwall.com/lists/oss-security/2015/04/15/2","tags":["report"]},{"url":"https://cxsecurity.com/issue/WLB-2015040075","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3306","tags":["report"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0542","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-0543","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2009-3639","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-1137","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2011-4130","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2013-4359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2015-3306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2016-3125","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2015-3306","description":"The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.","status":"published","published":"2015-05-18T15:00:00Z","modified":"2026-10-09T16:02:13.824Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:35:41.976732Z"}],"euvd":[{"id":"EUVD-2015-3352","description":"The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.","status":"published","published":"2015-05-18T15:00:00Z","modified":"2026-10-09T16:02:13Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"exploited_since":"2026-10-08","updated_at":"2026-11-02T17:27:25.010362Z"}],"ghsa":[{"id":"GHSA-4mfj-5wr8-x32q","title":"The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files...","description":"The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.","status":"published","published":"2022-05-13T01:09:57Z","modified":"2026-10-08T18:32:52Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T15:12:57.86261Z"}],"kev":[{"id":"CVE-2015-3306","title":"ProFTPD Improper Access Control Vulnerability","description":"ProFTPD contains an improper access control vulnerability that could allow remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.","cwes":["CWE-284"],"kev":{"date_added":"2026-10-08","due_date":"2026-10-11","required_action":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","known_ransomware_use":"Unknown"},"updated_at":"2026-11-02T17:00:15.999436Z"}],"nvd":[{"id":"CVE-2015-3306","description":"The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.","status":"published","published":"2015-05-18T15:59:10.743Z","modified":"2026-10-09T16:17:18.21Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"},{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:03:04.906059Z"}],"osv":[{"id":"DEBIAN-CVE-2015-3306","description":"The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.","status":"published","published":"2015-05-18T15:59:10.743Z","modified":"2026-10-09T19:47:32.238801879Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"UBUNTU-CVE-2015-3306","description":"The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.","status":"published","published":"2015-05-18T15:59:00Z","modified":"2026-10-12T14:20:20.232463416Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:10.045446Z"},{"id":"CVE-2015-3306","description":"The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.","status":"published","published":"2015-05-18T15:59:10Z","modified":"2026-04-10T03:45:18.005632Z","updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DSA-3263-1","title":"proftpd-dfsg - security update","status":"published","published":"2015-05-19T00:00:00Z","modified":"2026-03-09T01:20:25.600793Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"openSUSE-SU-2024:10048-1","title":"proftpd-1.3.5b-2.5 on GA media","description":"These are all security issues fixed in the proftpd-1.3.5b-2.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:26:45.618538Z","updated_at":"2026-11-02T16:58:33.135986Z"}]}}