CVE-2018-18861
CriticalCVSS 9.8Exploitation Probability (EPSS)
Very high risk91th percentile - higher than 91% of all known CVEs
Summary
Buffer overflow in PCMan FTP Server 2.0.7 allows remote code execution via the APPE command.
Risk Assessment
An attacker can remotely execute arbitrary code on the server, potentially leading to full system compromise.
Recommendation
Update the FTP server to a newer version or apply other mitigations such as firewalls and access restrictions.
Other vulnerabilities in PCMan FTP Server
See all- CVE-2025-5635High
Critical vulnerability in PCMan FTP Server 2.0.7, involving buffer overflow in the PLS Command Handler component.
- CVE-2025-5331High
A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. This vulnerability affects unknown code of the component NLST Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
- CVE-2024-0732Medium
Vulnerability in PCMan FTP Server 2.0.7, related to the STOR command handler. Manipulation leads to denial of service (DoS). The attack can be initiated remotely, and the exploit is publicly disclosed.
- CVE-2024-0731Medium
Vulnerability in PCMan FTP Server 2.0.7, related to the PUT command handler. Manipulation leads to denial of service (DoS). The attack can be initiated remotely, and the exploit is publicly disclosed.
- CVE-2021-4432Medium
Vulnerability in PCMan FTP Server 2.0.7 in the USER Command Handler component. Manipulation leads to denial of service. The attack can be initiated remotely.
Original NVD description (English source)
Buffer overflow in PCMan FTP Server 2.0.7 allows for remote code execution via the APPE command.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS