Servers and applications
CVE-2015-3306
The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.
Actively exploited: CISA added it to its Known Exploited Vulnerabilities catalog on 8 Oct 2026.
- Severity
- Critical 10.0
- Published
- 18 May 2015
- Last changed
- 9 Oct 2026
- Added to UpHeron
- 1 Nov 2026
- Exploit chance
- 99% in the next 30 daysHigher than 99% of CVEs. EPSS by FIRST, 11 Nov 2026
- Attack
- Over the network · No login needed · No user action needed
- Attacker can
- Read data · Change data · Take it down
- CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
ProFTPDServers and applications · cpe:a:proftpd:proftpd |
|
Known exploited
- CISA name
- ProFTPD Improper Access Control Vulnerability
- Required action
- Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or…
- Due for US agencies
- 11 Oct 2026
- Used in ransomware
- Not known