---
id: CVE-2016-15060
title: A vulnerability was found in PCMan FTP Server up to 2.0.7
summary: >-
  A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an
  unknown function of the component PORT Command Handler. The manipulation
  results in buffer overflow. The attack can be launched remotely. The exploit
  has been mad…
severity: high
cvss: 8.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L'
cwe:
  - CWE-119
  - CWE-120
vendor: PCMan
product: FTP Server
affected:
  - ftp_server 2.0.0
  - ftp_server 2.0.1
  - ftp_server 2.0.2
  - ftp_server 2.0.3
  - ftp_server 2.0.4
  - ftp_server 2.0.5
  - ftp_server 2.0.6
  - ftp_server 2.0.7
published: '2026-10-14'
updated: '2026-10-15'
sourceUpdated: '2026-10-15T14:45:38.353'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2016-15060'
references:
  - url: 'https://vuldb.com/cve/CVE-2016-15060'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/submit/983257'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/416953'
    label: cna@vuldb.com
  - url: 'https://vuldb.com/vuln/416953/cti'
    label: cna@vuldb.com
  - url: 'https://www.exploit-db.com/exploits/40714'
    label: cna@vuldb.com
tags:
  - nvd
  - cve.org
  - exploit-available
ingestedAt: '2026-10-14T17:44:53.625Z'
epss: 0.00516
epssPercentile: 0.43716
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'yes'
  technicalImpact: partial
  timestamp: '2026-10-20T01:40:46.680397Z'
---

## Overview

A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Command Handler. The manipulation results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.