7.3High
CVE-2025-4238PCMan FTP Server MGET Command buffer overflow
Description
A vulnerability was found in PCMan FTP Server 2.0.7. It has been classified as critical. This affects an unknown part of the component MGET Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| PCMan | FTP Server | 2.0.7 |
References and patches
- VDB-307329 | PCMan FTP Server MGET Command buffer overflow vdb-entryThird Party AdvisoryVDB Entry
- VDB-307329 | CTI Indicators (IOB, IOC) signature
- Submit #561561 | PCMan FTP Server 2.0.7 Buffer Overflow third-party-advisoryExploitThird Party AdvisoryVDB Entry
- https://fitoxs.com/exploit/exploit-a87ff679a2f3e71d9181a67b7542122c.txt broken-linkexploitExploit
CPE matches (NVD) (1)
cpe:2.3:a:pcman:ftp_server:2.0.7:*:*:*:*:*:*:*