{"id":"CVE-2015-3306","revision":"c156cc91af5040099d5c70925aa92d8c","records":[{"revision":"c156cc91af5040099d5c70925aa92d8c","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2015-3306","aliases":[],"title":"The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.","description":"The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the site cpfr and site cpto commands.","state":0,"publishedAt":"2015-05-18T15:00:00+00:00","modifiedAt":"2026-10-09T16:02:13.824+00:00","affected":[{"ecosystem":"Vendor product","name":"n/a","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"product\": \"n/a\",\n                    \"vendor\": \"n/a\",\n                    \"versions\": [\n                        {\n                            \"status\": \"affected\",\n                            \"version\": \"n/a\"\n                        }\n                    ]\n                }"}],"metrics":[],"references":["http://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec","https://www.exploit-db.com/exploits/36803/","http://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execution.html","http://www.debian.org/security/2015/dsa-3263","http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.html","http://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Execution.html","http://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html","http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html","http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html","http://www.securityfocus.com/bid/74238","https://www.exploit-db.com/exploits/36742/","http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157581.html","http://packetstormsecurity.com/files/131505/ProFTPd-1.3.5-File-Copy.html","http://packetstormsecurity.com/files/162777/ProFTPd-1.3.5-Remote-Command-Execution.html"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2015-3306","license":"CVE Program Terms of Use","key":"cve-program:CVE-2015-3306","identifiers":["CVE-2015-3306"]},"retained":false,"historicalAffected":[]}],"coverage":[]}