A vulnerability was found in PCMan FTP Server 2.0.7. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component SEND Command Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://fitoxs.com/exploit/exploit-202cb962ac59075b964b07152d234b70.txt | Exploit |
| https://fitoxs.com/exploit/exploit-202cb962ac59075b964b07152d234b70.txt | Exploit |
| https://vuldb.com/?ctiid.306799 | Permissions Required |
| https://vuldb.com/?id.306799 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.561139 | Exploit Third Party Advisory VDB Entry |
Configurations
History
13 May 2025, 20:27
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://vuldb.com/?ctiid.306799 - Permissions Required | |
| References | () https://vuldb.com/?id.306799 - Third Party Advisory, VDB Entry | |
| References | () https://fitoxs.com/exploit/exploit-202cb962ac59075b964b07152d234b70.txt - Exploit | |
| References | () https://vuldb.com/?submit.561139 - Exploit, Third Party Advisory, VDB Entry | |
| First Time |
Pcman
Pcman ftp Server |
|
| CWE | CWE-120 | |
| CPE | cpe:2.3:a:pcman:ftp_server:2.0.7:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
02 May 2025, 18:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
| CWE | CWE-119 |
01 May 2025, 23:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-01 23:15
Updated : 2025-05-13 20:27
NVD link : CVE-2025-4181
Mitre link : CVE-2025-4181
JSON object : View
Products Affected
pcman
- ftp_server
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')