VULNERABILITY INTELLIGENCE
CVE-2015-3306
CVSS score10 CRITICAL
EPSS probability99.50%
CISA KEVKnown exploited vulnerability
Published2015-05-18
Last modified2026-10-09
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Known Exploited Vulnerability
ProFTPD Improper Access Control Vulnerability
Vendor / product: ProFTPD / ProFTPD
Description
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.
Weakness classification
- CWE-284: Improper Access Control
Primary references
- cve@mitre.org — Broken Link, Mailing List, Third Party Advisory
- cve@mitre.org — Broken Link, Mailing List, Third Party Advisory
- cve@mitre.org — Broken Link, Mailing List, Third Party Advisory
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Exploit, VDB Entry
- cve@mitre.org — Exploit, VDB Entry
- cve@mitre.org — Exploit, VDB Entry
- cve@mitre.org — Mailing List, Third Party Advisory
- cve@mitre.org — Third Party Advisory
- cve@mitre.org — Third Party Advisory