{"id":"CVE-2013-4730","title":"Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command.","summary":"Buffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command.","severity":"critical","cvss":10,"cvssVector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","cwe":["CWE-119"],"vendor":"pcman","product":"ftp_server","affected":["ftp_server = 2.0.7"],"published":"2014-05-15","updated":"2026-08-19","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2013-4730","references":[{"url":"http://infosec42.blogspot.com/2013/06/unauthenticated-pcman-ftp-207-buffer.html","label":"cve@mitre.org"},{"url":"http://osvdb.org/show/osvdb/94624","label":"cve@mitre.org"},{"url":"http://www.exploit-db.com/exploits/26471","label":"cve@mitre.org"},{"url":"http://www.securityfocus.com/bid/60837","label":"cve@mitre.org"},{"url":"http://infosec42.blogspot.com/2013/06/unauthenticated-pcman-ftp-207-buffer.html","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://osvdb.org/show/osvdb/94624","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.exploit-db.com/exploits/26471","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securityfocus.com/bid/60837","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd","exploit-available"],"epss":0.66462,"epssPercentile":0.99249,"exploitAvailable":true,"ingestedAt":"2026-08-19T17:42:35.773Z","exploits":{"exploitdb":true,"github":1,"githubRepos":["https://github.com/t0rt3ll1n0/PCmanBoF"],"metasploit":["exploit/windows/ftp/pcman_put","exploit/windows/ftp/pcman_stor"],"checkedAt":"2026-09-23T07:13:14.954Z"},"slug":"CVE-2013-4730","body":"## Overview\n\nBuffer overflow in PCMan's FTP Server 2.0.7 allows remote attackers to execute arbitrary code via a long string in a USER command.\n\n## Affected\n\n- `ftp_server = 2.0.7`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"abyssal","depthScore":80,"depthScoreParts":{"impact":55,"likelihood":13.3,"exploitation":12,"ransomware":0},"changes":[]}