Exploit for Improper Access Control in Proftpd

githubexploit · 2026-09-07

Description

Pre-auth arbitrary file copy in ProFTPD mod_copy via CVE-2015-3306.

Entry point

Parameter/proc/self/cmdline · path

Path/proc/self/cmdline

Copy from /proc/self/cmdline via SITE CPFR/CPTO to write a PHP payload into a temporary location (FTP-based exploit).

Affected Proftpd versions

Proftpd= 1.3.5

All known vulnerabilities by product

Alt Linux Proftpd

CVSS 10.0 for CVE-2015-3306

10.0

HIGH SEVERITY

Version 2.0

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C

Working code

78%confidence this exploit runs

Based on 1 file(s) in the source

EPSS Score

96.8%higher than 99.9% of all CVEs

Updated 2026-09-07

Exploit Details

Modified:2026-09-07 20:37

Last Seen:2026-09-07 20:38

Reporter:diegslva

Tags

ProFTPDmod_copyarbitrary file copypre-authenticationImproper Access ControlCVE-2015-3306raw-socket exploit

Other exploits for CVE-2015-3306

2026-09-07 KitPloitKITPLOIT

CVE-2015-3306-Python-PoC

2026-09-07 KitPloitKITPLOIT

2026-09-07 KitPloitKITPLOIT

2026-09-07 KitPloitKITPLOIT

2026-09-07 KitPloitKITPLOIT

2026-09-06 KitPloitKITPLOIT

ProFTPD_CVE-2015-3306

2026-09-06 KitPloitKITPLOIT

2026-09-06 KitPloitKITPLOIT

Exploit Code

README3 lines

## https://sploitus.com/exploit?id=27D143DE-8696-5640-9005-C17ACF01DD9C
# cve-2015-3306-lab
Reproducible Docker lab + raw-socket exploit for CVE-2015-3306 (ProFTPD mod_copy pre-auth arbitrary file copy) — a patch-diffing learning exercise