Buffer Overflow Vulnerability in PCMan FTP Server by PCMan
CVE-2025-3726

6.9MEDIUM

Key Information:

Vendor
Pcman
Vendor
CVE Published:
16 April 2025

Badges

👾 Exploit Exists

Summary

A vulnerability exists in the PCMan FTP Server 2.0.7 that allows for a buffer overflow in the CD Command Handler component. This flaw can be exploited remotely, enabling attackers to manipulate the application and potentially compromise system integrity. The exploit has been publicly disclosed, heightening the risk for users running this version of the FTP server. It is crucial for users to assess their systems for exposure and to implement necessary security measures to mitigate this vulnerability.

Affected Version(s)

FTP Server 2.0.7

References

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

.
CVE-2025-3726 : Buffer Overflow Vulnerability in PCMan FTP Server by PCMan | SecurityVulnerability.io