8.3High
CVE-2016-15060PCMan FTP Server PORT buffer overflow
Description
A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Command Handler. The manipulation results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| PCMan | FTP Server | 2.0.0, 2.0.1, 2.0.2, 2.0.3, 2.0.4, 2.0.5, 2.0.6, 2.0.7 |
References and patches
- VDB-416953 | PCMan FTP Server PORT buffer overflow vdb-entry
- VDB-416953 | CTI Indicators (IOB, IOC) signature
- CVE-2016-15060 | CVE Analysis and Report third-party-advisory
- Submit #983257 | Pcman's Ftp Server Project Pcman Ftp Server 2.0.7 Stack-based Buffer Overflow third-party-advisory
- https://www.exploit-db.com/exploits/40714 exploit