{"id":"CVE-2016-15060","state":"PUBLISHED","title":"PCMan FTP Server PORT buffer overflow","description":"A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Command Handler. The manipulation results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.","publishedAt":"2026-10-14T16:30:08.738Z","updatedAt":"2026-10-20T01:40:54.990Z","severity":{"score":6.9,"label":"Medium","version":"4.0","vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P","source":"VulDB"},"assigner":"VulDB","products":["PCMan FTP Server"],"affected":[{"vendor":"PCMan","product":"FTP Server","versions":[{"version":"2.0.0","status":"affected"},{"version":"2.0.1","status":"affected"},{"version":"2.0.2","status":"affected"},{"version":"2.0.3","status":"affected"},{"version":"2.0.4","status":"affected"},{"version":"2.0.5","status":"affected"},{"version":"2.0.6","status":"affected"},{"version":"2.0.7","status":"affected"}],"cpes":["cpe:2.3:a:pcman:ftp_server:*:*:*:*:*:*:*:*"],"modules":["PORT Command Handler"]}],"references":["https://vuldb.com/vuln/416953","https://vuldb.com/vuln/416953/cti","https://vuldb.com/cve/CVE-2016-15060","https://vuldb.com/submit/983257","https://www.exploit-db.com/exploits/40714"],"weaknesses":["CWE-120","CWE-119"],"ingestedAt":"2026-10-29T19:42:31.720Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2016/15xxx/CVE-2016-15060.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.2","cveMetadata":{"cveId":"CVE-2016-15060","state":"PUBLISHED","datePublished":"2026-10-14T16:30:08.738Z","dateUpdated":"2026-10-20T01:40:54.990Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2026-10-12T15:09:35.883Z"},"containers":{"cna":{"title":"PCMan FTP Server PORT buffer overflow","descriptions":[{"lang":"en","value":"A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Command Handler. The manipulation results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used."}],"affected":[{"vendor":"PCMan","product":"FTP Server","versions":[{"version":"2.0.0","status":"affected"},{"version":"2.0.1","status":"affected"},{"version":"2.0.2","status":"affected"},{"version":"2.0.3","status":"affected"},{"version":"2.0.4","status":"affected"},{"version":"2.0.5","status":"affected"},{"version":"2.0.6","status":"affected"},{"version":"2.0.7","status":"affected"}],"cpes":["cpe:2.3:a:pcman:ftp_server:*:*:*:*:*:*:*:*"],"modules":["PORT Command Handler"]}],"references":[{"url":"https://vuldb.com/vuln/416953","name":"VDB-416953 | PCMan FTP Server PORT buffer overflow","tags":["vdb-entry"]},{"url":"https://vuldb.com/vuln/416953/cti","name":"VDB-416953 | CTI Indicators (IOB, IOC)","tags":["signature","permissions-required"]},{"url":"https://vuldb.com/cve/CVE-2016-15060","name":"CVE-2016-15060 | CVE Analysis and Report","tags":["third-party-advisory"]},{"url":"https://vuldb.com/submit/983257","name":"Submit #983257 | Pcman's Ftp Server Project Pcman Ftp Server  2.0.7 Stack-based Buffer Overflow","tags":["third-party-advisory"]},{"url":"https://www.exploit-db.com/exploits/40714","tags":["exploit"]}],"metrics":[{"cvssV4_0":{"version":"4.0","baseScore":6.9,"vectorString":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P","baseSeverity":"MEDIUM"}},{"cvssV3_1":{"version":"3.1","baseScore":8.3,"vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV3_0":{"version":"3.0","baseScore":8.3,"vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L/E:P/RL:X/RC:R","baseSeverity":"HIGH"}},{"cvssV2_0":{"version":"2.0","baseScore":7.5,"vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-120","type":"CWE","lang":"en","description":"Buffer Overflow"}]},{"descriptions":[{"cweId":"CWE-119","type":"CWE","lang":"en","description":"Memory Corruption"}]}],"providerMetadata":{"shortName":"VulDB","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateUpdated":"2026-10-14T16:30:08.738Z"},"timeline":[{"time":"2016-04-11T00:00:00.000Z","lang":"en","value":"Advisory disclosed"},{"time":"2026-10-12T02:00:00.000Z","lang":"en","value":"VulDB entry created"},{"time":"2026-10-12T17:15:11.000Z","lang":"en","value":"VulDB entry last update"}],"credits":[{"lang":"en","value":"pablogonzalezpe (VulDB User)","type":"reporter"}],"x_generator":["VulDB PVTS v202610"]},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2026-10-20T01:40:46.680397Z","id":"CVE-2016-15060","options":[{"Exploitation":"poc"},{"Automatable":"yes"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2026-10-20T01:40:54.990Z"}}]}}}