CVE-2016-15060

Deferred Deferred - Pending Action

Buffer Overflow in PCMan FTP Server

Publication date: 2026-10-14

Last updated on: 2026-10-14

Assigner: VulDB

Description

A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Command Handler. The manipulation results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-14

Last Modified

2026-10-14

Generated

2026-10-19

AI Q&A

2026-10-15

EPSS Evaluated

2026-10-18

NVD

CVE-2016-15060

EUVD

EUVD-2016-10916

Affected Vendors & Products

Vendor	Product	Version / Range
PCMan	FTP	Server 2.0.0
PCMan	FTP	Server 2.0.1
PCMan	FTP	Server 2.0.2
PCMan	FTP	Server 2.0.3
PCMan	FTP	Server 2.0.4
PCMan	FTP	Server 2.0.5
PCMan	FTP	Server 2.0.6
PCMan	FTP	Server 2.0.7

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-120	The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

Executive Summary

This vulnerability is a buffer overflow flaw in PCMan FTP Server versions up to 2.0.7. It occurs when the PORT command handler processes specially crafted input, causing a buffer to overflow. Attackers can exploit this remotely by sending malicious data to gain control of the affected system.

Detection Guidance

To detect this vulnerability, check if PCMan FTP Server version 2.0.7 or earlier is running on your system. Use network scanning tools like nmap to identify FTP servers on port 21. If the server responds to a PORT command with an unusually long string, it may indicate a buffer overflow attempt.

Impact Analysis

An attacker could exploit this to execute arbitrary code on your system, potentially gaining full control. This could lead to data theft, system compromise, or further network infiltration. The exploit allows remote attackers to open a backdoor shell on port 1144.

Compliance Impact

This vulnerability, a remote buffer overflow in PCMan FTP Server, could lead to unauthorized access or data breaches, which may violate compliance requirements under GDPR (data protection) and HIPAA (protected health information). Unauthorized access risks exposure of sensitive data, potentially resulting in regulatory penalties or legal consequences.

Mitigation Strategies

Immediately update PCMan FTP Server to the latest version beyond 2.0.7. If an update is unavailable, disable the FTP service or restrict access via firewall rules. Monitor network traffic for suspicious PORT command activity targeting port 21.

Hi! I’m here to help you understand CVE-2016-15060. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70