FTP Server (<= 2.0.7) - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/ftp-server--2.0.7/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioWed, 14 Oct 2026 18:33:49 +0000https://feed.craftedsignal.io/favicon-32x32.pngCraftedSignal Threat Feedhttps://feed.craftedsignal.io/3232https://feed.craftedsignal.io/favicon.svgBuffer Overflow Vulnerability in PCMan FTP Serverhttps://feed.craftedsignal.io/briefs/2026-10-pcman-ftp-overflow/Wed, 14 Oct 2026 18:33:49 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-10-pcman-ftp-overflow/PCMan FTP Server versions through 2.0.7 contain a buffer overflow vulnerability in the PORT command handler that allows remote attackers to execute arbitrary code or trigger a denial of service.PCMan FTP Server versions up to and including 2.0.7 are vulnerable to a buffer overflow vulnerability within the PORT command handler. This flaw allows a remote, unauthenticated attacker to send a specially crafted request that triggers memory corruption. The vulnerability stems from improper bounds checking when processing the PORT command, which facilitates the execution of arbitrary code or results in a service crash. With public exploit material available, defenders must prioritize patching or isolating instances of this legacy FTP server, as it lacks modern memory protections and presents a significant remote code execution risk.

Impact

Successful exploitation of this vulnerability leads to complete compromise of the hosting server via arbitrary code execution or results in persistent denial of service. The vulnerability affects all deployments of PCMan FTP Server version 2.0.7 and earlier, which are commonly found in legacy environments or misconfigured test setups.

Recommendation

  • Upgrade PCMan FTP Server to a supported, secure alternative, as version 2.0.7 is end-of-life and contains known unpatched vulnerabilities.
  • Implement network segmentation to restrict access to FTP services to authorized IP ranges only.
  • Monitor server logs for unexpected process crashes or anomalous traffic patterns directed at the FTP port (default TCP 21) that deviate from standard file transfer sequences.
]]>highadvisory