CVE-2015-3306

Exploitation active confirmée

Ajoutée au catalogue CISA KEV le 08/10/2026, correctif exigé avant le 11/10/2026 pour les agences fédérales américaines.

Action requise : Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.

Description officielle (NVD)

The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.

Preuves de concept publiques (18)

Dépôts tiers non vérifiés, parfois piégés. Ne les exécutez jamais en production : uniquement dans un environnement de test isolé.

• t0kx/exploit-CVE-2015-3306 · ★ 152 · 08/01/2017
  ProFTPd 1.3.5 - (mod_copy) Remote Command Execution exploit and vulnerable container
• nootropics/propane · ★ 2 · 26/04/2015
  Exploits the arbitrary file write bug in proftpd (CVE-2015-3306) attempts code execution
• xyk0x/cpx_proftpd · ★ 1 · 21/04/2015
  Tool for exploit CVE-2015-3306
• davidtavarez/CVE-2015-3306 · ★ 1 · 29/07/2017
  ProFTPd 1.3.5 - File Copy
• cd6629/CVE-2015-3306-Python-PoC · ★ 1 · 16/10/2020
  Converted with tweaks from a metasploit module as an exercise for OSCP studying and exploit development
• 0xm4ud/ProFTPD_CVE-2015-3306 · ★ 1 · 16/05/2021
• jptr218/proftpd_bypass · ★ 1 · 21/08/2021
  An implementation of CVE-2015-3306
• cybersensei-EH/hackviser_labs_CVE-2015-3306 · ★ 1 · 02/11/2025
  This is a customized script to help solve the lab on remote code execution under the CVE-2015-3306 lab.
• bcononugbor-source/OpenVAS-Vulnerability-Analysis-Incident-Response-Report · ★ 1 · 03/06/2026
  Real-World Simulation: FTP Service Exploitation (ProFTPD CVE-2015-3306)
• cved-sources/cve-2015-3306 · ★ 0 · 06/01/2019
  cve-2015-3306

Les 10 dépôts les plus suivis sont affichés.

Références

• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html — Broken Link, Mailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html — Broken Link, Mailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157581.html — Broken Link, Mailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html — Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/131505/ProFTPd-1.3.5-File-Copy.html — Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execution.html — Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.html — Exploit, VDB Entry
• http://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Execution.html — Exploit, VDB Entry
• http://packetstormsecurity.com/files/162777/ProFTPd-1.3.5-Remote-Command-Execution.html — Exploit, VDB Entry
• http://www.debian.org/security/2015/dsa-3263 — Mailing List, Third Party Advisory
• http://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec — Third Party Advisory
• http://www.securityfocus.com/bid/74238 — Third Party Advisory
• https://www.exploit-db.com/exploits/36742/ — Exploit
• https://www.exploit-db.com/exploits/36803/ — Exploit
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html — Broken Link, Mailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html — Broken Link, Mailing List, Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157581.html — Broken Link, Mailing List, Third Party Advisory
• http://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html — Mailing List, Third Party Advisory
• http://packetstormsecurity.com/files/131505/ProFTPd-1.3.5-File-Copy.html — Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execution.html — Third Party Advisory, VDB Entry
• http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.html — Exploit, VDB Entry
• http://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Execution.html — Exploit, VDB Entry
• http://packetstormsecurity.com/files/162777/ProFTPd-1.3.5-Remote-Command-Execution.html — Exploit, VDB Entry
• http://www.debian.org/security/2015/dsa-3263 — Mailing List, Third Party Advisory
• http://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec — Third Party Advisory
• http://www.securityfocus.com/bid/74238 — Third Party Advisory
• https://www.exploit-db.com/exploits/36742/ — Exploit
• https://www.exploit-db.com/exploits/36803/ — Exploit
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3306 — US Government Resource

En bref

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Produits concernés

Sources officielles

Besoin d'aide ?

Nos experts évaluent votre exposition et vous accompagnent dans la correction.