What’s Vulnerable › Vulnerabilities

CVE-2018-18861

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 4.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-11-20 · updated 2026-08-19
• Weakness: CWE-119

Description

Buffer overflow in PCMan FTP Server 2.0.7 allows for remote code execution via the APPE command.

Affected products

• PCMan FTP Server: 2.0.7

References

• http://packetstormsecurity.com/files/150174/PCManFTPD-2.0.7-Server-APPE-Command-Buffer-Overflow.html
• http://packetstormsecurity.com/files/150174/PCManFTPD-2.0.7-Server-APPE-Command-Buffer-Overflow.html

Get alerted when CVE-2018-18861 or the next vulnerability affects your stack