CVE-2013-4730
Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command.
- Published
- May 15, 2014
- Updated
- Aug 6, 2024
- Assigning CNA
- mitre
- Evidence observed
- Jun 30, 2013
Primary CVSS
nvd · CVSS 2.0
AV:N/AC:L/Au:N/C:C/I:C/A:CHigh · next 30 days
- Percentile
- 99.3%
- Model date
- Oct 13, 2026
EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.
Summary
Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command.
Sources
modules/exploits/windows/ftp/pcman_put.rb
Metasploit Framework modulesDeclared conditions
- platform: Windows($.exploit_windows/ftp/pcman_put.platform)
- verification: check_declared($.exploit_windows/ftp/pcman_put.check)
modules/exploits/windows/ftp/pcman_stor.rb
Metasploit Framework modulesDeclared conditions
- platform: Windows($.exploit_windows/ftp/pcman_stor.platform)
- verification: check_declared($.exploit_windows/ftp/pcman_stor.check)
- PCmanBoFExploit
A very simple buffer overflow using CVE-2013-4730 against PCman's FTP server
Chako · windows · Jun 30, 2013
MSJ · windows · Jul 22, 2013
Ottomatik · windows · Aug 2, 2013
Polunchis · windows · Aug 19, 2013
Rick Flores · windows · Sep 17, 2013
Mahmod Mahajna (Mahy) · windows · Jan 29, 2014
Mahmod Mahajna (Mahy) · windows · Jan 29, 2014
Sumit · windows · Feb 20, 2014
R-73eN · windows · Feb 14, 2015
Koby · windows · Aug 29, 2015
Responsible use
Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.