7.3High
CVE-2025-4288PCMan FTP Server RNFR Command buffer overflow
Description
A vulnerability classified as critical has been found in PCMan FTP Server 2.0.7. This affects an unknown part of the component RNFR Command Handler. The manipulation leads to buffer overflow. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| PCMan | FTP Server | 2.0.7 |
References and patches
- VDB-307395 | PCMan FTP Server RNFR Command buffer overflow vdb-entryThird Party AdvisoryVDB Entry
- VDB-307395 | CTI Indicators (IOB, IOC) signature
- Submit #561625 | PCMan FTP Server 2.0.7 Buffer Overflow third-party-advisoryExploitThird Party AdvisoryVDB Entry
- https://fitoxs.com/exploit/exploit-aab361888e671e1705f94c27c26f9bc7c9c63d3c66d5df89e31dcaf7fa17f528.txt broken-linkexploitExploit
CPE matches (NVD) (1)
cpe:2.3:a:pcman:ftp_server:2.0.7:*:*:*:*:*:*:*