CVE-2018-18861 Memory corruption in n/a

What is CVE-2018-18861?

CVE-2018-18861 is a critical memory corruption vulnerability in Pcman Ftp Server, published on 20 Nov 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Buffer overflow in PCMan FTP Server 2.0.7 allows for remote code execution via the APPE command.

Weakness: CWE-119

Which versions are affected by CVE-2018-18861?

It affects 1 product.

Products include Pcman Ftp Server.

How do I fix CVE-2018-18861?

No fix has been published for CVE-2018-18861 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2018-18861 being exploited?

There is no known exploitation of CVE-2018-18861 in the wild and no public exploit code.

Other vulnerabilities in Pcman Ftp Server

• CVE-2013-4730 Memory corruption in n/a Critical 10.0
• CVE-2015-7601 Path traversal in n/a High 7.8
• CVE-2025-5634 PCMan FTP Server NOOP Command buffer overflow Medium 6.9
• CVE-2025-5635 PCMan FTP Server PLS Command buffer overflow Medium 6.9
• CVE-2025-5636 PCMan FTP Server SET Command buffer overflow Medium 6.9

All Pcman Ftp Server vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-9f7c-p7m5-r79c.