CVE-2025-5635
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk47th percentile - higher than 47% of all known CVEs
Summary
Critical vulnerability in PCMan FTP Server 2.0.7, involving buffer overflow in the PLS Command Handler component.
Risk Assessment
Remote attack could lead to buffer overflow, potentially allowing code execution or service disruption.
Recommendation
Apply patches or restrict access to the FTP server.
Other vulnerabilities in PCMan FTP Server
See all- CVE-2018-18861Critical
Buffer overflow in PCMan FTP Server 2.0.7 allows remote code execution via the APPE command.
- CVE-2025-5331High
A vulnerability has been found in PCMan FTP Server 2.0.7 and classified as critical. This vulnerability affects unknown code of the component NLST Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
- CVE-2024-0732Medium
Vulnerability in PCMan FTP Server 2.0.7, related to the STOR command handler. Manipulation leads to denial of service (DoS). The attack can be initiated remotely, and the exploit is publicly disclosed.
- CVE-2024-0731Medium
Vulnerability in PCMan FTP Server 2.0.7, related to the PUT command handler. Manipulation leads to denial of service (DoS). The attack can be initiated remotely, and the exploit is publicly disclosed.
- CVE-2021-4432Medium
Vulnerability in PCMan FTP Server 2.0.7 in the USER Command Handler component. Manipulation leads to denial of service. The attack can be initiated remotely.
Original NVD description (English source)
A vulnerability classified as critical was found in PCMan FTP Server 2.0.7. This vulnerability affects unknown code of the component PLS Command Handler. The manipulation leads to buffer overflow. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.