peter bassill · operator
$ cve CVE-2015-3306 JSON

CVE-2015-3306 KEV EXPLOIT

10.0
CRITICAL · CVSS 3.1 · EPSS 99.5% (pctl 100)

Patch first

On CISA KEV — known exploited in the wild, due 2026-10-11.

Description

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.

Scoring

CVSS10.0 (CRITICAL, v3.1)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
EPSS99.5% — more likely to be exploited than 100% of all CVEs
WeaknessCWE-284
On CISA KEVyes — remediate by 2026-10-11
Public exploityes
Published2015-05-18
Last modified2026-10-09

CISA KEV

NameProFTPD Improper Access Control Vulnerability
Added2026-10-08
Due2026-10-11
Vendor / productProFTPD / ProFTPD
Ransomware usenone reported

Affected (5)

VendorProduct
debiandebian linux
fedoraprojectfedora
opensusetumbleweed
proftpdproftpd
suselinux enterprise server

Public exploits

SourceTitleDate
exploit-dbProFTPd 1.3.5 - 'mod_copy' Remote Command Execution (2)2021-05-26
exploit-dbProFTPd 1.3.5 - 'mod_copy' Command Execution (Metasploit)2015-06-10
exploit-dbProFTPd 1.3.5 - 'mod_copy' Remote Command Execution2015-04-21
exploit-dbProFTPd 1.3.5 - File Copy2015-04-13

References

→ the Explorer  ·  watch your stack  ·  NVD