CVE-2016-15060
HighCVSS 8.3Exploitation Probability (EPSS)
Low risk43th percentile - higher than 43% of all known CVEs
Summary
A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Command Handler. The manipulation results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.
Risk Assessment
A remote attacker can exploit the buffer overflow, potentially leading to service crashes or arbitrary code execution on the server.
Recommendation
Update PCMan FTP Server to the latest version or apply available patches. Restrict access to the FTP service from untrusted networks.
Other vulnerabilities in PCMan FTP Server
See all- CVE-2018-18861Critical
Buffer overflow in PCMan FTP Server 2.0.7 allows remote code execution via the APPE command.
- CVE-2025-5635High
Critical vulnerability in PCMan FTP Server 2.0.7, involving buffer overflow in the PLS Command Handler component.
- CVE-2025-5331High
A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. This vulnerability affects unknown code of the component NLST Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
- CVE-2024-0732Medium
Vulnerability in PCMan FTP Server 2.0.7, related to the STOR command handler. Manipulation leads to denial of service (DoS). The attack can be initiated remotely, and the exploit is publicly disclosed.
- CVE-2024-0731Medium
Vulnerability in PCMan FTP Server 2.0.7, related to the PUT command handler. Manipulation leads to denial of service (DoS). The attack can be initiated remotely, and the exploit is publicly disclosed.
- CVE-2021-4432Medium
Vulnerability in PCMan FTP Server 2.0.7 in the USER Command Handler component. Manipulation leads to denial of service. The attack can be initiated remotely.
Original NVD description (English source)
A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Command Handler. The manipulation results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS