CVE-2016-15060: PCMan FTP Server PORT buffer overflow
A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Command Handler. The manipulation results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.
Affected Software
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
PCMan FTP Server versions up to and including 2.0.7 are affected. The vulnerable code is in the handler for the FTP PORT command.
Does exploitation require authentication or user interaction?
No. The supplied vector indicates the issue is remotely reachable, requires low attack complexity, and does not require privileges or user interaction.
Is public exploit information available?
Yes. The exploit has been made public and could be used.
What is the potential impact of successful exploitation?
Successful exploitation can affect confidentiality, integrity, and availability, each with low impact. The vulnerability is rated high severity with a CVSS score of 8.3.