A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. This vulnerability affects unknown code of the component NLST Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
References
| Link | Resource |
|---|---|
| https://github.com/r3ng4f/PCMan_1/blob/main/exploit02.txt | Exploit |
| https://github.com/r3ng4f/PCMan_1/blob/main/exploit02.txt | Exploit |
| https://vuldb.com/?ctiid.310504 | Permissions Required VDB Entry |
| https://vuldb.com/?id.310504 | Third Party Advisory VDB Entry |
| https://vuldb.com/?submit.585404 | Third Party Advisory VDB Entry |
Configurations
History
23 Jun 2025, 14:35
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:pcman_ftp_server_project:pcman_ftp_server:2.0.7:*:*:*:*:*:*:* | |
| First Time |
Pcman Ftp Server Project
Pcman Ftp Server Project pcman Ftp Server |
|
| CWE | CWE-120 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| References | () https://github.com/r3ng4f/PCMan_1/blob/main/exploit02.txt - Exploit | |
| References | () https://vuldb.com/?ctiid.310504 - Permissions Required, VDB Entry | |
| References | () https://vuldb.com/?submit.585404 - Third Party Advisory, VDB Entry | |
| References | () https://vuldb.com/?id.310504 - Third Party Advisory, VDB Entry |
30 May 2025, 14:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-119 |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
29 May 2025, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-05-29 22:15
Updated : 2025-06-23 14:35
NVD link : CVE-2025-5331
Mitre link : CVE-2025-5331
JSON object : View
Products Affected
pcman_ftp_server_project
- pcman_ftp_server
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')