CVE-2024-0732 - PCMan FTP Server STOR Command denial of service

Back Back to CVE browser

HIGH

PCMan FTP Server STOR Command denial of service

Published Jan 19, 2024

7.5

HIGH

CVSS 3.1

EPSS 1.10%

Description

A vulnerability was found in PCMan FTP Server 2.0.7 and classified as problematic. This issue affects some unknown processing of the component STOR Command Handler. The manipulation leads to denial of service. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-251555.

Affected products

Vendor PCMan Product FTP Server Default
n/a
- Version
  2.0.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

PCMan

FTP Server

n/a

Version	Status	Constraints
2.0.7	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-120

Classic Buffer Overflow

CWE-404

Improper Resource Shutdown or Release

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16521
Advisory
https://fitoxs.com/vuldb/02-PCMan%20v2.0.7-exploit.txt
exploitThird Party Advisory
https://vuldb.com/?ctiid.251555
signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.251555
vdb-entryThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16521		Advisory
https://fitoxs.com/vuldb/02-PCMan%20v2.0.7-exploit.txt		exploitThird Party Advisory
https://vuldb.com/?ctiid.251555		signaturepermissions-requiredPermissions RequiredThird Party Advisory
https://vuldb.com/?id.251555		vdb-entryThird Party Advisory