Executive Summary

Buffer overflow in PCMan FTP Server 2.0.7 triggered by the APPE command allows attackers to execute arbitrary code remotely, potentially compromising the host system. The flaw can be exploited over the network without authentication, making it a high‑impact vulnerability for exposed FTP services.

---

Authoritative CVE Metadata - CVSS Base Score: 9.8 (CRITICAL) - Published: 2018-11-20T19:29:01.760 - Last Modified: 2026-08-19T17:19:07.717

Original Description: Buffer overflow in PCMan FTP Server 2.0.7 allows for remote code execution via the APPE command.

"If one advances confidently in the direction of his dream, and endeavours to live the life which he had imagines, he will meet with a success unexpected in common hours."

— Henry David Thoreau