CVE-2025-4871 - PCMan FTP Server REST Command buffer overflow

Back Back to CVE browser

MEDIUM

PCMan FTP Server REST Command buffer overflow

Published May 18, 2025

6.9

MEDIUM

CVSS 4.0

EPSS 1.62%

Description

A vulnerability, which was classified as critical, has been found in PCMan FTP Server 2.0.7. This issue affects some unknown processing of the component REST Command Handler. The manipulation leads to buffer overflow. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Affected products

Vendor PCMan Product FTP Server Default
n/a
- Version
  2.0.7
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

PCMan

FTP Server

n/a

Version	Status	Constraints
2.0.7	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-119

Buffer Overflow

CWE-120

Classic Buffer Overflow

References (5)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-15700
Advisory
https://github.com/Blu3B3ard/PoC-Pacman-FTP-Server-2.0.7/blob/main/exploit.txt
exploit
https://vuldb.com/?ctiid.309413
signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.309413
vdb-entryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.575624
third-party-advisoryExploitThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-15700		Advisory
https://github.com/Blu3B3ard/PoC-Pacman-FTP-Server-2.0.7/blob/main/exploit.txt		exploit
https://vuldb.com/?ctiid.309413		signaturepermissions-requiredPermissions RequiredVDB Entry
https://vuldb.com/?id.309413		vdb-entryThird Party AdvisoryVDB Entry
https://vuldb.com/?submit.575624		third-party-advisoryExploitThird Party AdvisoryVDB Entry