CVE-2025-5331
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk50th percentile - higher than 50% of all known CVEs
Summary
A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. This vulnerability affects unknown code of the component NLST Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
Risk Assessment
The risk for the organization includes the possibility of remote code execution or FTP server crash, which could lead to data integrity compromise or service disruption.
Recommendation
It is recommended to immediately apply patches or updates to the PCMan FTP server, and restrict access to the FTP service to trusted networks only.
Other vulnerabilities in PCMan FTP Server
See all- CVE-2018-18861Critical
Buffer overflow in PCMan FTP Server 2.0.7 allows remote code execution via the APPE command.
- CVE-2025-5635High
Critical vulnerability in PCMan FTP Server 2.0.7, involving buffer overflow in the PLS Command Handler component.
- CVE-2024-0732Medium
Vulnerability in PCMan FTP Server 2.0.7, related to the STOR command handler. Manipulation leads to denial of service (DoS). The attack can be initiated remotely, and the exploit is publicly disclosed.
- CVE-2024-0731Medium
Vulnerability in PCMan FTP Server 2.0.7, related to the PUT command handler. Manipulation leads to denial of service (DoS). The attack can be initiated remotely, and the exploit is publicly disclosed.
- CVE-2021-4432Medium
Vulnerability in PCMan FTP Server 2.0.7 in the USER Command Handler component. Manipulation leads to denial of service. The attack can be initiated remotely.
Original NVD description (English source)
A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. This vulnerability affects unknown code of the component NLST Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.