{"schema":"threatline.record/2","record":{"id":"CVE-2016-15060","aliases":[],"summary":"PCMan FTP Server PORT buffer overflow","details":"A vulnerability was found in PCMan FTP Server up to 2.0.7. This affects an unknown function of the component PORT Command Handler. The manipulation results in buffer overflow. The attack can be launched remotely. The exploit has been made public and could be used.","categories":["Unclassified"],"product":"FTP Server","vendor":"PCMan","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2016-15060","source_modified_at":"2026-10-20T01:40:54.990Z","fetched_at":"2026-10-23T18:45:31.882637Z","product":"FTP Server","vendor":"PCMan","versions":[{"version":"2.0.0","status":"affected"},{"version":"2.0.1","status":"affected"},{"version":"2.0.2","status":"affected"},{"version":"2.0.3","status":"affected"},{"version":"2.0.4","status":"affected"},{"version":"2.0.5","status":"affected"},{"version":"2.0.6","status":"affected"},{"version":"2.0.7","status":"affected"}],"defaultStatus":null}],"fixed_versions":[],"cvss":6.9,"severity":"Medium","kev":{"listed":false},"epss":{"probability":0.00516,"percentile":0.43077,"score_date":"2026-10-23"},"published_at":"2026-10-14T16:30:08.738Z","modified_at":"2026-10-20T01:40:54.990Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2016-15060","fetched_at":"2026-10-23T18:45:31.882637Z","source_modified_at":"2026-10-20T01:40:54.990Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2016-15060","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CVE List","EPSS"],"references":[{"source":"CVE List","url":"https://vuldb.com/vuln/416953","tags":["vdb-entry"]},{"source":"CVE List","url":"https://vuldb.com/vuln/416953/cti","tags":["signature","permissions-required"]},{"source":"CVE List","url":"https://vuldb.com/cve/CVE-2016-15060","tags":["third-party-advisory"]},{"source":"CVE List","url":"https://vuldb.com/submit/983257","tags":["third-party-advisory"]},{"source":"CVE List","url":"https://www.exploit-db.com/exploits/40714","tags":["exploit"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"poc","automatable":"yes","technical_impact":"partial","assessed_at":"2026-10-20T01:40:46.680397Z"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-20T01:40:54.990Z","content_hash":"6723776c8b0b6f9d3142f6a76847358b98392d428815e871b04a3ad1795a5ab1"}}
