{"schema":"vulnpedia.research/1","cve":"CVE-2015-3306","references":[{"url":"http://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec","tags":["x_refsource_MISC","x_transferred","Third Party Advisory"],"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","url":"http://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.231Z","url":"http://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec"},{"source":"nvd","sourceId":"CVE-2015-3306","modified":"2026-10-09T16:17:18.210","url":"http://www.rapid7.com/db/modules/exploit/unix/ftp/proftpd_modcopy_exec"}]},{"url":"https://www.exploit-db.com/exploits/36803/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit"],"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","url":"https://www.exploit-db.com/exploits/36803/"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.231Z","url":"https://www.exploit-db.com/exploits/36803/"},{"source":"nvd","sourceId":"CVE-2015-3306","modified":"2026-10-09T16:17:18.210","url":"https://www.exploit-db.com/exploits/36803/"}]},{"url":"http://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execution.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"],"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","url":"http://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execution.html"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.231Z","url":"http://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execution.html"},{"source":"nvd","sourceId":"CVE-2015-3306","modified":"2026-10-09T16:17:18.210","url":"http://packetstormsecurity.com/files/131555/ProFTPd-1.3.5-Remote-Command-Execution.html"}]},{"url":"http://www.debian.org/security/2015/dsa-3263","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","url":"http://www.debian.org/security/2015/dsa-3263"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.231Z","url":"http://www.debian.org/security/2015/dsa-3263"},{"source":"nvd","sourceId":"CVE-2015-3306","modified":"2026-10-09T16:17:18.210","url":"http://www.debian.org/security/2015/dsa-3263"}]},{"url":"http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.html","tags":["x_refsource_MISC","x_transferred","Exploit","VDB Entry"],"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","url":"http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.html"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.231Z","url":"http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.html"},{"source":"nvd","sourceId":"CVE-2015-3306","modified":"2026-10-09T16:17:18.210","url":"http://packetstormsecurity.com/files/131567/ProFTPd-CPFR-CPTO-Proof-Of-Concept.html"}]},{"url":"http://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Execution.html","tags":["x_refsource_MISC","x_transferred","Exploit","VDB Entry"],"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","url":"http://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Execution.html"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.231Z","url":"http://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Execution.html"},{"source":"nvd","sourceId":"CVE-2015-3306","modified":"2026-10-09T16:17:18.210","url":"http://packetstormsecurity.com/files/132218/ProFTPD-1.3.5-Mod_Copy-Command-Execution.html"}]},{"url":"http://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","url":"http://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.231Z","url":"http://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html"},{"source":"nvd","sourceId":"CVE-2015-3306","modified":"2026-10-09T16:17:18.210","url":"http://lists.opensuse.org/opensuse-updates/2015-06/msg00020.html"}]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Broken Link","Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.231Z","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html"},{"source":"nvd","sourceId":"CVE-2015-3306","modified":"2026-10-09T16:17:18.210","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157053.html"}]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Broken Link","Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.231Z","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html"},{"source":"nvd","sourceId":"CVE-2015-3306","modified":"2026-10-09T16:17:18.210","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157054.html"}]},{"url":"http://www.securityfocus.com/bid/74238","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory"],"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","url":"http://www.securityfocus.com/bid/74238"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.231Z","url":"http://www.securityfocus.com/bid/74238"},{"source":"nvd","sourceId":"CVE-2015-3306","modified":"2026-10-09T16:17:18.210","url":"http://www.securityfocus.com/bid/74238"}]},{"url":"https://www.exploit-db.com/exploits/36742/","tags":["exploit","x_refsource_EXPLOIT-DB","x_transferred","Exploit"],"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","url":"https://www.exploit-db.com/exploits/36742/"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.231Z","url":"https://www.exploit-db.com/exploits/36742/"},{"source":"nvd","sourceId":"CVE-2015-3306","modified":"2026-10-09T16:17:18.210","url":"https://www.exploit-db.com/exploits/36742/"}]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157581.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","Broken Link","Mailing List","Third Party Advisory"],"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157581.html"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.231Z","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157581.html"},{"source":"nvd","sourceId":"CVE-2015-3306","modified":"2026-10-09T16:17:18.210","url":"http://lists.fedoraproject.org/pipermail/package-announce/2015-May/157581.html"}]},{"url":"http://packetstormsecurity.com/files/131505/ProFTPd-1.3.5-File-Copy.html","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","VDB Entry"],"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","url":"http://packetstormsecurity.com/files/131505/ProFTPd-1.3.5-File-Copy.html"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.231Z","url":"http://packetstormsecurity.com/files/131505/ProFTPd-1.3.5-File-Copy.html"},{"source":"nvd","sourceId":"CVE-2015-3306","modified":"2026-10-09T16:17:18.210","url":"http://packetstormsecurity.com/files/131505/ProFTPd-1.3.5-File-Copy.html"}]},{"url":"http://packetstormsecurity.com/files/162777/ProFTPd-1.3.5-Remote-Command-Execution.html","tags":["x_refsource_MISC","x_transferred","Exploit","VDB Entry"],"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","origins":[{"source":"mitre","sourceId":"mitre","modified":"2021-05-26T19:06:22.000Z","url":"http://packetstormsecurity.com/files/162777/ProFTPd-1.3.5-Remote-Command-Execution.html"},{"source":"mitre","sourceId":"CVE","modified":"2024-08-06T05:39:32.231Z","url":"http://packetstormsecurity.com/files/162777/ProFTPd-1.3.5-Remote-Command-Execution.html"},{"source":"nvd","sourceId":"CVE-2015-3306","modified":"2026-10-09T16:17:18.210","url":"http://packetstormsecurity.com/files/162777/ProFTPd-1.3.5-Remote-Command-Execution.html"}]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3306","tags":["government-resource","US Government Resource"],"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-09T16:02:13.824Z","origins":[{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-10-09T16:02:13.824Z","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3306"},{"source":"nvd","sourceId":"CVE-2015-3306","modified":"2026-10-09T16:17:18.210","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2015-3306"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3306.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2015-3306","modified":"2026-10-09T02:00:22+00:00","origins":[{"source":"redhat","sourceId":"CVE-2015-3306","modified":"2026-10-09T02:00:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3306.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3306","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2015-3306","modified":"2026-10-09T02:00:22+00:00","origins":[{"source":"redhat","sourceId":"CVE-2015-3306","modified":"2026-10-09T02:00:22+00:00","url":"https://access.redhat.com/security/cve/CVE-2015-3306"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3306","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2015-3306","modified":"2026-10-09T02:00:22+00:00","origins":[{"source":"redhat","sourceId":"CVE-2015-3306","modified":"2026-10-09T02:00:22+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2015-3306"}]},{"source":"euvd","sourceId":"EUVD-2015-3352","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-3352","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2015-3352","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2015-3352"}]},{"url":"https://vulncheck.com/kev","tags":["ADVISORY"],"source":"vulncheck-kev","sourceId":"CVE-2015-3306","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2015-3306","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-281a","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2015-3306","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2015-3306","modified":"2026-10-08T00:00:00Z","url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-281a"}]},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","tags":["KEV report"],"source":"vulncheck-kev","sourceId":"CVE-2015-3306","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2015-3306","modified":"2026-10-08T00:00:00Z","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]},{"url":"https://vulncheck.com/xdb/537c3491c145","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"537c3491c145","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"537c3491c145","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/537c3491c145"}]},{"url":"https://github.com/t0kx/exploit-CVE-2015-3306","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"537c3491c145","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"537c3491c145","modified":"2026-10-08T00:00:00Z","url":"https://github.com/t0kx/exploit-CVE-2015-3306"}]},{"url":"https://vulncheck.com/xdb/167ef2696304","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"167ef2696304","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"167ef2696304","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/167ef2696304"}]},{"url":"https://github.com/cdedmondson/Modified-CVE-2015-3306-Exploit","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"167ef2696304","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"167ef2696304","modified":"2026-10-08T00:00:00Z","url":"https://github.com/cdedmondson/Modified-CVE-2015-3306-Exploit"}]},{"url":"https://vulncheck.com/xdb/7f464364a04f","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"7f464364a04f","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7f464364a04f","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/7f464364a04f"}]},{"url":"https://github.com/cd6629/CVE-2015-3306-Python-PoC","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"7f464364a04f","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7f464364a04f","modified":"2026-10-08T00:00:00Z","url":"https://github.com/cd6629/CVE-2015-3306-Python-PoC"}]},{"url":"https://vulncheck.com/xdb/37c8b5890c73","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"37c8b5890c73","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"37c8b5890c73","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/37c8b5890c73"}]},{"url":"https://github.com/JoseLRC97/ProFTPd-1.3.5-mod_copy-Remote-Command-Execution","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"37c8b5890c73","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"37c8b5890c73","modified":"2026-10-08T00:00:00Z","url":"https://github.com/JoseLRC97/ProFTPd-1.3.5-mod_copy-Remote-Command-Execution"}]},{"url":"https://vulncheck.com/xdb/f88c1ceda400","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"f88c1ceda400","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f88c1ceda400","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/f88c1ceda400"}]},{"url":"https://github.com/Z3R0-0x30/CVE-2015-3306","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"f88c1ceda400","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"f88c1ceda400","modified":"2026-10-08T00:00:00Z","url":"https://github.com/Z3R0-0x30/CVE-2015-3306"}]},{"url":"https://vulncheck.com/xdb/cf8a5b58ef63","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"cf8a5b58ef63","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"cf8a5b58ef63","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/cf8a5b58ef63"}]},{"url":"https://github.com/donmedfor/CVE-2015-3306","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"cf8a5b58ef63","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"cf8a5b58ef63","modified":"2026-10-08T00:00:00Z","url":"https://github.com/donmedfor/CVE-2015-3306"}]},{"url":"https://vulncheck.com/xdb/db77ad285709","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"db77ad285709","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"db77ad285709","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/db77ad285709"}]},{"url":"https://github.com/cybersensei-EH/hackviser_labs_CVE-2015-3306","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"db77ad285709","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"db77ad285709","modified":"2026-10-08T00:00:00Z","url":"https://github.com/cybersensei-EH/hackviser_labs_CVE-2015-3306"}]},{"url":"https://vulncheck.com/xdb/5ca93f4359fe","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"5ca93f4359fe","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5ca93f4359fe","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/5ca93f4359fe"}]},{"url":"https://github.com/0xm4ud/ProFTPD_CVE-2015-3306","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"5ca93f4359fe","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"5ca93f4359fe","modified":"2026-10-08T00:00:00Z","url":"https://github.com/0xm4ud/ProFTPD_CVE-2015-3306"}]},{"url":"https://vulncheck.com/xdb/edac01077a79","tags":["XDB catalogue"],"source":"vulncheck-kev","sourceId":"edac01077a79","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"edac01077a79","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/edac01077a79"}]},{"url":"https://github.com/diegslva/cve-2015-3306-lab","tags":["XDB repository"],"source":"vulncheck-kev","sourceId":"edac01077a79","modified":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"edac01077a79","modified":"2026-10-08T00:00:00Z","url":"https://github.com/diegslva/cve-2015-3306-lab"}]}],"packages":[],"pocCandidates":[{"url":"https://github.com/xyk0x/cpx_proftpd","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"Tool for exploit CVE-2015-3306","modified":"2024-08-12T19:17:09Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/xyk0x/cpx_proftpd"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2024-08-12T19:17:09Z","url":"https://github.com/xyk0x/cpx_proftpd"}],"tags":[]},{"url":"https://github.com/nootropics/propane","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"Exploits the arbitrary file write bug in proftpd (CVE-2015-3306) attempts code execution","modified":"2024-08-12T19:17:12Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/nootropics/propane"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2024-08-12T19:17:12Z","url":"https://github.com/nootropics/propane"}],"tags":[]},{"url":"https://github.com/t0kx/exploit-CVE-2015-3306","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"ProFTPd 1.3.5 - (mod_copy) Remote Command Execution exploit and vulnerable container","modified":"2026-10-01T16:52:06Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/t0kx/exploit-CVE-2015-3306"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2026-10-01T16:52:06Z","url":"https://github.com/t0kx/exploit-CVE-2015-3306"}],"tags":[]},{"url":"https://github.com/davidtavarez/CVE-2015-3306","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"ProFTPd 1.3.5 - File Copy","modified":"2021-05-05T18:56:50Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/davidtavarez/CVE-2015-3306"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2021-05-05T18:56:50Z","url":"https://github.com/davidtavarez/CVE-2015-3306"}],"tags":[]},{"url":"https://github.com/cved-sources/cve-2015-3306","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"cve-2015-3306","modified":"2021-04-15T21:10:57Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/cved-sources/cve-2015-3306"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2021-04-15T21:10:57Z","url":"https://github.com/cved-sources/cve-2015-3306"}],"tags":[]},{"url":"https://github.com/hackarada/cve-2015-3306","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"cve-2015-3306 docker image","modified":"2023-09-20T06:51:13Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/hackarada/cve-2015-3306"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2023-09-20T06:51:13Z","url":"https://github.com/hackarada/cve-2015-3306"}],"tags":[]},{"url":"https://github.com/cdedmondson/Modified-CVE-2015-3306-Exploit","source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2020-05-15T18:12:23Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/cdedmondson/Modified-CVE-2015-3306-Exploit"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2020-05-15T18:12:23Z","url":"https://github.com/cdedmondson/Modified-CVE-2015-3306-Exploit"}],"tags":[]},{"url":"https://github.com/cd6629/CVE-2015-3306-Python-PoC","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"Converted with tweaks from a metasploit module as an exercise for OSCP studying and exploit development","modified":"2023-08-28T04:05:53Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/cd6629/CVE-2015-3306-Python-PoC"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2023-08-28T04:05:53Z","url":"https://github.com/cd6629/CVE-2015-3306-Python-PoC"}],"tags":[]},{"url":"https://github.com/0xm4ud/ProFTPD_CVE-2015-3306","source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2021-12-02T17:50:12Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/0xm4ud/ProFTPD_CVE-2015-3306"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2021-12-02T17:50:12Z","url":"https://github.com/0xm4ud/ProFTPD_CVE-2015-3306"}],"tags":[]},{"url":"https://github.com/jptr218/proftpd_bypass","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"An implementation of CVE-2015-3306","modified":"2021-08-21T17:46:49Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/jptr218/proftpd_bypass"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2021-08-21T17:46:49Z","url":"https://github.com/jptr218/proftpd_bypass"}],"tags":[]},{"url":"https://github.com/JoseLRC97/ProFTPd-1.3.5-mod_copy-Remote-Command-Execution","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"Script that exploits the vulnerability of the ProFTPd 1.3.5 service with CVE-2015-3306","modified":"2024-04-18T18:13:27Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/JoseLRC97/ProFTPd-1.3.5-mod_copy-Remote-Command-Execution"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2024-04-18T18:13:27Z","url":"https://github.com/JoseLRC97/ProFTPd-1.3.5-mod_copy-Remote-Command-Execution"}],"tags":[]},{"url":"https://github.com/Z3R0space/CVE-2015-3306","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"This contains single-file exploit for ProFTPd 1.3.5 mod_copy (CVE-2015-3306) vulnerability, especially for TryHackMe Kenobi Lab.","modified":"2025-05-14T06:20:46Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/Z3R0space/CVE-2015-3306"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2025-05-14T06:20:46Z","url":"https://github.com/Z3R0space/CVE-2015-3306"}],"tags":[]},{"url":"https://github.com/donmedfor/CVE-2015-3306","source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2025-08-23T16:41:40Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/donmedfor/CVE-2015-3306"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2025-08-23T16:41:40Z","url":"https://github.com/donmedfor/CVE-2015-3306"}],"tags":[]},{"url":"https://github.com/cybersensei-EH/hackviser_labs_CVE-2015-3306","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"This is a customized script to help solve the lab on remote code execution under the CVE-2015-3306 lab.","modified":"2025-11-06T09:07:49Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/cybersensei-EH/hackviser_labs_CVE-2015-3306"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2025-11-06T09:07:49Z","url":"https://github.com/cybersensei-EH/hackviser_labs_CVE-2015-3306"}],"tags":[]},{"url":"https://github.com/netw0rk7/CVE-2015-3306-Home-Lab","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"CVE-2015-3306 - ProFTPD - RCE Home Lab setup (Docker) easy to use for Red Teaming or Penetration Testing","modified":"2025-11-19T01:51:41Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/netw0rk7/CVE-2015-3306-Home-Lab"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2025-11-19T01:51:41Z","url":"https://github.com/netw0rk7/CVE-2015-3306-Home-Lab"}],"tags":[]},{"url":"https://github.com/canpilayda/proftpd-mod_copy-cve-2015-3306","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"Exploitation report for ProFTPD 1.3.5 mod_copy (CVE-2015-3306) lab.","modified":"2026-01-18T18:16:55Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/canpilayda/proftpd-mod_copy-cve-2015-3306"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2026-01-18T18:16:55Z","url":"https://github.com/canpilayda/proftpd-mod_copy-cve-2015-3306"}],"tags":[]},{"url":"https://github.com/bcononugbor-source/OpenVAS-Vulnerability-Analysis-Incident-Response-Report","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"Real-World Simulation: FTP Service Exploitation (ProFTPD CVE-2015-3306)","modified":"2026-06-08T10:10:14Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/bcononugbor-source/OpenVAS-Vulnerability-Analysis-Incident-Response-Report"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2026-06-08T10:10:14Z","url":"https://github.com/bcononugbor-source/OpenVAS-Vulnerability-Analysis-Incident-Response-Report"}],"tags":[]},{"url":"https://github.com/diegslva/cve-2015-3306-lab","source":"poc-in-github","sourceId":"CVE-2015-3306","description":"Reproducible Docker lab + raw-socket exploit for CVE-2015-3306 (ProFTPD mod_copy pre-auth arbitrary file copy) — a patch-diffing learning exercise","modified":"2026-09-07T20:44:43Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2015-3306","url":"https://github.com/diegslva/cve-2015-3306-lab"},{"source":"poc-in-github","sourceId":"CVE-2015-3306","modified":"2026-09-07T20:44:43Z","url":"https://github.com/diegslva/cve-2015-3306-lab"}],"tags":[]}],"cataloguedPoc":[{"url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/ftp/proftpd_modcopy_exec.rb","source":"metasploit","sourceId":"exploit/unix/ftp/proftpd_modcopy_exec","description":"ProFTPD 1.3.5 Mod_Copy Command Execution","modified":"2026-04-22 11:59:31 +0000","kind":"metasploit","verification":"catalogued","origins":[{"source":"metasploit","sourceId":"exploit/unix/ftp/proftpd_modcopy_exec","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/ftp/proftpd_modcopy_exec.rb"},{"source":"metasploit","sourceId":"exploit/unix/ftp/proftpd_modcopy_exec","modified":"2026-04-22 11:59:31 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/ftp/proftpd_modcopy_exec.rb"}],"tags":[]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"537c3491c145","url":"https://vulncheck.com/xdb/537c3491c145","cve":"CVE-2015-3306","dateAdded":"2023-12-21T02:56:53Z","modified":"2026-10-08T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/t0kx/exploit-CVE-2015-3306","observations":[{"dateAdded":"2023-12-21T02:56:53Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"537c3491c145","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/537c3491c145"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"167ef2696304","url":"https://vulncheck.com/xdb/167ef2696304","cve":"CVE-2015-3306","dateAdded":"2023-12-21T02:56:57Z","modified":"2026-10-08T00:00:00Z","exploitType":"local","repositoryUrl":"https://github.com/cdedmondson/Modified-CVE-2015-3306-Exploit","observations":[{"dateAdded":"2023-12-21T02:56:57Z","exploitType":"local"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"167ef2696304","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/167ef2696304"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"7f464364a04f","url":"https://vulncheck.com/xdb/7f464364a04f","cve":"CVE-2015-3306","dateAdded":"2023-12-21T02:56:58Z","modified":"2026-10-08T00:00:00Z","exploitType":"local","repositoryUrl":"https://github.com/cd6629/CVE-2015-3306-Python-PoC","observations":[{"dateAdded":"2023-12-21T02:56:58Z","exploitType":"local"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"7f464364a04f","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/7f464364a04f"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"37c8b5890c73","url":"https://vulncheck.com/xdb/37c8b5890c73","cve":"CVE-2015-3306","dateAdded":"2024-10-23T06:49:09Z","modified":"2026-10-08T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/JoseLRC97/ProFTPd-1.3.5-mod_copy-Remote-Command-Execution","observations":[{"dateAdded":"2024-10-23T06:49:09Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"37c8b5890c73","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/37c8b5890c73"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"f88c1ceda400","url":"https://vulncheck.com/xdb/f88c1ceda400","cve":"CVE-2015-3306","dateAdded":"2025-05-14T10:53:10Z","modified":"2026-10-08T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/Z3R0-0x30/CVE-2015-3306","observations":[{"dateAdded":"2025-05-14T10:53:10Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"f88c1ceda400","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/f88c1ceda400"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"cf8a5b58ef63","url":"https://vulncheck.com/xdb/cf8a5b58ef63","cve":"CVE-2015-3306","dateAdded":"2025-08-25T14:56:07Z","modified":"2026-10-08T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/donmedfor/CVE-2015-3306","observations":[{"dateAdded":"2025-08-25T14:56:07Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"cf8a5b58ef63","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/cf8a5b58ef63"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"db77ad285709","url":"https://vulncheck.com/xdb/db77ad285709","cve":"CVE-2015-3306","dateAdded":"2025-11-02T20:36:22Z","modified":"2026-10-08T00:00:00Z","exploitType":"initial-access","repositoryUrl":"https://github.com/cybersensei-EH/hackviser_labs_CVE-2015-3306","observations":[{"dateAdded":"2025-11-02T20:36:22Z","exploitType":"initial-access"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"db77ad285709","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/db77ad285709"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"5ca93f4359fe","url":"https://vulncheck.com/xdb/5ca93f4359fe","cve":"CVE-2015-3306","dateAdded":"2026-02-26T03:51:35Z","modified":"2026-10-08T00:00:00Z","exploitType":"local","repositoryUrl":"https://github.com/0xm4ud/ProFTPD_CVE-2015-3306","observations":[{"dateAdded":"2026-02-26T03:51:35Z","exploitType":"local"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"5ca93f4359fe","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/5ca93f4359fe"}]},{"source":"vulncheck-kev","kind":"vulncheck-xdb","verification":"catalogued","sourceId":"edac01077a79","url":"https://vulncheck.com/xdb/edac01077a79","cve":"CVE-2015-3306","dateAdded":"2026-09-08T21:55:59Z","modified":"2026-10-08T00:00:00Z","exploitType":"info-leak","repositoryUrl":"https://github.com/diegslva/cve-2015-3306-lab","observations":[{"dateAdded":"2026-09-08T21:55:59Z","exploitType":"info-leak"}],"tags":[],"origins":[{"source":"vulncheck-kev","sourceId":"edac01077a79","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/xdb/edac01077a79"}]}],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2015-3306","modified":"2026-10-09T02:00:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3306.json","productId":"red_hat_products","product":"All currently supported Red Hat products","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","origins":[{"source":"redhat","sourceId":"CVE-2015-3306","modified":"2026-10-09T02:00:22+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2015/cve-2015-3306.json"}]}],"vendorCoverage":{"total":1,"shown":1,"omitted":0,"source":"redhat"},"exploitationSources":[{"source":"vulncheck-kev","sourceId":"CVE-2015-3306","catalog":"VulnCheck KEV","kind":"catalogue","url":"https://vulncheck.com/kev","dateAdded":"2026-10-08T00:00:00Z","modified":"2026-10-08T00:00:00Z","requiredAction":"Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for evaluating each asset's internet exposure and ensuring adherence to BOD 26-04 patching guidelines.","knownRansomwareCampaignUse":"Unknown","reportedByVulncheckCanaries":false,"vendorProject":"ProFTPD","product":"ProFTPD","dueDate":"2026-10-11T00:00:00Z","cisaDateAdded":"2026-10-08T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"CVE-2015-3306","modified":"2026-10-08T00:00:00Z","url":"https://vulncheck.com/kev"}]},{"source":"vulncheck-kev","sourceId":"CVE-2015-3306","catalog":"VulnCheck KEV","kind":"report","url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-281a","dateAdded":"2026-10-08T00:00:00Z","firstPartyCanary":false,"origins":[{"source":"vulncheck-kev","sourceId":"CVE-2015-3306","url":"https://www.cisa.gov/news-events/cybersecurity-advisories/aa26-281a"},{"source":"vulncheck-kev","sourceId":"CVE-2015-3306","url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json"}]}]}